| commit | dc4501ff287547dea7ca10f1c580c741291a8760 | [log] [tgz] |
|---|---|---|
| author | Cong Wang <xiyou.wangcong@gmail.com> | Sun Dec 23 21:45:56 2018 -0800 |
| committer | David S. Miller <davem@davemloft.net> | Thu Dec 27 16:16:17 2018 -0800 |
| tree | 0a10986ad2cdbfbe097751d9d6183185b5e8f86f | |
| parent | b71acb0e372160167bf6d5500b88b30b52ccef6e [diff] |
tipc: fix a double free in tipc_enable_bearer()
bearer_disable() already calls kfree_rcu() to free struct tipc_bearer,
we don't need to call kfree() again.
Fixes: cb30a63384bc ("tipc: refactor function tipc_enable_bearer()")
Reported-by: syzbot+b981acf1fb240c0c128b@syzkaller.appspotmail.com
Cc: Ying Xue <ying.xue@windriver.com>
Cc: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>