| commit | 0e08785845093ef4ed220463a739bc8d0db95de7 | [log] [tgz] |
|---|---|---|
| author | Patrick McHardy <kaber@trash.net> | Tue Apr 12 05:39:51 2011 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Tue Apr 12 14:38:57 2011 -0700 |
| tree | e3c9539949a3c00ea2457439bb6f36e5c4842f54 | |
| parent | 192910a6cca5e50e5bd6cbd1da0e7376c7adfe62 [diff] |
connector: fix skb double free in cn_rx_skb() When a skb is delivered to a registered callback, cn_call_callback() incorrectly returns -ENODEV after freeing the skb, causing cn_rx_skb() to free the skb a second time. Reported-by: Eric B Munson <emunson@mgebm.net> Signed-off-by: Patrick McHardy <kaber@trash.net> Tested-by: Eric B Munson <emunson@mgebm.net> Signed-off-by: David S. Miller <davem@davemloft.net>