summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid S. Miller <davem@sunset.davemloft.net>2006-12-06 23:45:15 -0800
committerDavid S. Miller <davem@sunset.davemloft.net>2006-12-06 23:45:15 -0800
commit26db167702756d0022f8ea5f1f30cad3018cfe31 (patch)
tree26af4b280538a66772b0496f2b0d50fbe6a7cfb3
parentc9204d9ca79baac564b49d36d0228a69d7ded084 (diff)
downloadlinux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.tar.gz
linux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.tar.bz2
linux-3.10-26db167702756d0022f8ea5f1f30cad3018cfe31.zip
[IPSEC]: Fix inetpeer leak in ipv4 xfrm dst entries.
We grab a reference to the route's inetpeer entry but forget to release it in xfrm4_dst_destroy(). Bug discovered by Kazunori MIYAZAWA <kazunori@miyazawa.org> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--net/ipv4/xfrm4_policy.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv4/xfrm4_policy.c b/net/ipv4/xfrm4_policy.c
index d4107bb701b..fb9f69c616f 100644
--- a/net/ipv4/xfrm4_policy.c
+++ b/net/ipv4/xfrm4_policy.c
@@ -274,6 +274,8 @@ static void xfrm4_dst_destroy(struct dst_entry *dst)
if (likely(xdst->u.rt.idev))
in_dev_put(xdst->u.rt.idev);
+ if (likely(xdst->u.rt.peer))
+ inet_putpeer(xdst->u.rt.peer);
xfrm_dst_destroy(xdst);
}