tree d00ed817e44012cb111d55201f4be59e597ec971
parent 90a6348602c13d189c6fcaac9a608eb79957d1da
author Herbert Xu <herbert@gondor.apana.org.au> 1463390896 +0800
committer chrmhoffmann <chrmhoffmann@gmail.com> 1502527631 +0200

netlink: Fix dump skb leak/double free

When we free cb->skb after a dump, we do it after releasing the
lock.  This means that a new dump could have started in the time
being and we'll end up freeing their skb instead of ours.

This patch saves the skb and module before we unlock so we free
the right memory.

Change-Id: I81f1eb1ef4951917b5db084bd7a4289222eab597
Fixes: 16b304f3404f ("netlink: Eliminate kmalloc in netlink dump operation.")
Reported-by: Baozeng Ding <sploving1@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Acked-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>