commit | 69c64866ce072dea1d1e59a0d61e0f66c0dffb76 | [log] [tgz] |
---|---|---|
author | Mohamed Ghannam <simo.ghannam@gmail.com> | Tue Dec 05 20:58:35 2017 +0000 |
committer | David S. Miller <davem@davemloft.net> | Tue Dec 05 18:08:53 2017 -0500 |
tree | d4587f7c9475921120c56fa9e11d5ec0ea3d074d | |
parent | d7efc6c11b277d9d80b99b1334a78bfe7d7edf10 [diff] |
dccp: CVE-2017-8824: use-after-free in DCCP code Whenever the sock object is in DCCP_CLOSED state, dccp_disconnect() must free dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL. Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>