diff options
| author | David Ahern <dsa@cumulusnetworks.com> | 2016-08-23 21:05:27 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-08-23 23:11:36 -0700 |
| commit | d7226c7a4dd19929d6df4ae04698da2fcf6f875a (patch) | |
| tree | 33b158ecdb0ed30ca22110588dc368b91a10f9ed /net/bluetooth/hci_request.c | |
| parent | 7b996243fab46092fb3a29c773c54be8152366e4 (diff) | |
net: diag: Fix refcnt leak in error path destroying socket
inet_diag_find_one_icsk takes a reference to a socket that is not
released if sock_diag_destroy returns an error. Fix by changing
tcp_diag_destroy to manage the refcnt for all cases and remove
the sock_put calls from tcp_abort.
Fixes: c1e64e298b8ca ("net: diag: Support destroying TCP sockets")
Reported-by: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/bluetooth/hci_request.c')
0 files changed, 0 insertions, 0 deletions