tree 456176a054fc9a3fed18ac6ce50c7a34a86c5808
parent 3918fed5f31213067c1c345bd904e1ea369e6819
author Pekka Enberg <penberg@cs.helsinki.fi> 1217119773 -0700
committer David S. Miller <davem@davemloft.net> 1217119773 -0700

netfilter: fix double-free and use-after free

As suggested by Patrick McHardy, introduce a __krealloc() that doesn't
free the original buffer to fix a double-free and use-after-free bug
introduced by me in netfilter that uses RCU.

Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi>
Tested-by: Dieter Ries <clip2@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>