summaryrefslogtreecommitdiff
path: root/net
diff options
context:
space:
mode:
authorJesper Juhl <jesper.juhl@gmail.com>2007-08-07 18:10:54 -0700
committerDavid S. Miller <davem@davemloft.net>2007-08-07 18:10:54 -0700
commit3af8e31cf57646284b5f77f9d57d2c22fa77485a (patch)
tree4c39d509d0c6db9e2bfdbabc8f4be66d3795d308 /net
parent864c5a4d37b1f25e3c36dd00a09158eae455a8fd (diff)
downloadlinux-3.10-3af8e31cf57646284b5f77f9d57d2c22fa77485a.tar.gz
linux-3.10-3af8e31cf57646284b5f77f9d57d2c22fa77485a.tar.bz2
linux-3.10-3af8e31cf57646284b5f77f9d57d2c22fa77485a.zip
[NETFILTER]: ipt_recent: avoid a possible NULL pointer deref in recent_seq_open()
If the call to seq_open() returns != 0 then the code calls kfree(st) but then on the very next line proceeds to dereference the pointer - not good. Problem spotted by the Coverity checker. Signed-off-by: Jesper Juhl <jesper.juhl@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r--net/ipv4/netfilter/ipt_recent.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/net/ipv4/netfilter/ipt_recent.c b/net/ipv4/netfilter/ipt_recent.c
index 32180431565..6d0c0f7364a 100644
--- a/net/ipv4/netfilter/ipt_recent.c
+++ b/net/ipv4/netfilter/ipt_recent.c
@@ -387,12 +387,17 @@ static int recent_seq_open(struct inode *inode, struct file *file)
st = kzalloc(sizeof(*st), GFP_KERNEL);
if (st == NULL)
return -ENOMEM;
+
ret = seq_open(file, &recent_seq_ops);
- if (ret)
+ if (ret) {
kfree(st);
+ goto out;
+ }
+
st->table = pde->data;
seq = file->private_data;
seq->private = st;
+out:
return ret;
}