diff options
| author | Mohamed Ghannam <simo.ghannam@gmail.com> | 2017-12-05 20:58:35 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-02-16 20:09:40 +0100 |
| commit | 3196c1515ea683bb6f95673feb2998f605ab581d (patch) | |
| tree | 1fe6bf32b487b2402a67f2c7d1f0f32ffd686a29 /include/linux/timerqueue.h | |
| parent | 911357aed6e35b4c094a5ca419ca987dc48bfbfb (diff) | |
dccp: CVE-2017-8824: use-after-free in DCCP code
commit 69c64866ce072dea1d1e59a0d61e0f66c0dffb76 upstream.
Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions