diff options
author | David S. Miller <davem@sunset.davemloft.net> | 2006-12-06 23:45:15 -0800 |
---|---|---|
committer | David S. Miller <davem@sunset.davemloft.net> | 2006-12-06 23:45:15 -0800 |
commit | 26db167702756d0022f8ea5f1f30cad3018cfe31 (patch) | |
tree | 26af4b280538a66772b0496f2b0d50fbe6a7cfb3 | |
parent | c9204d9ca79baac564b49d36d0228a69d7ded084 (diff) | |
download | linux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.tar.gz linux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.tar.bz2 linux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.zip |
[IPSEC]: Fix inetpeer leak in ipv4 xfrm dst entries.
We grab a reference to the route's inetpeer entry but
forget to release it in xfrm4_dst_destroy().
Bug discovered by Kazunori MIYAZAWA <kazunori@miyazawa.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r-- | net/ipv4/xfrm4_policy.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv4/xfrm4_policy.c b/net/ipv4/xfrm4_policy.c index d4107bb701b..fb9f69c616f 100644 --- a/net/ipv4/xfrm4_policy.c +++ b/net/ipv4/xfrm4_policy.c @@ -274,6 +274,8 @@ static void xfrm4_dst_destroy(struct dst_entry *dst) if (likely(xdst->u.rt.idev)) in_dev_put(xdst->u.rt.idev); + if (likely(xdst->u.rt.peer)) + inet_putpeer(xdst->u.rt.peer); xfrm_dst_destroy(xdst); } |