Cong Wang f404723deb tipc: fix a double free in tipc_enable_bearer() ...

[ Upstream commit dc4501ff287547dea7ca10f1c580c741291a8760 ]

bearer_disable() already calls kfree_rcu() to free struct tipc_bearer,
we don't need to call kfree() again.

Fixes: cb30a63384 ("tipc: refactor function tipc_enable_bearer()")
Reported-by: syzbot+b981acf1fb240c0c128b@syzkaller.appspotmail.com
Cc: Ying Xue <ying.xue@windriver.com>
Cc: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-01-09 17:38:34 +01:00

..

addr.c

…

addr.h

…

bcast.c

tipc: correct spelling errors for struct tipc_bc_base's comment

2018-09-03 22:03:07 -07:00

bcast.h

…

bearer.c

tipc: fix a double free in tipc_enable_bearer()

2019-01-09 17:38:34 +01:00

bearer.h

…

core.c

…

core.h

…

diag.c

tipc: switch to rhashtable iterator

2018-08-29 18:04:54 -07:00

discover.c

tipc: fix lockdep warning when reinitilaizing sockets

2018-11-23 08:17:03 +01:00

discover.h

…

eth_media.c

…

group.c

tipc: fix info leak from kernel tipc_event

2018-10-18 16:49:53 -07:00

group.h

tipc: extend sock diag for group communication

2018-06-30 21:05:42 +09:00

ib_media.c

…

Kconfig

…

link.c

tipc: fix link re-establish failure

2018-11-23 08:17:04 +01:00

link.h

tipc: fix failover problem

2018-09-29 11:45:14 -07:00

Makefile

…

monitor.c

tipc: make some functions static

2018-07-21 16:23:22 -07:00

monitor.h

…

msg.c

…

msg.h

…

name_distr.c

tipc: fix unsafe rcu locking when accessing publication list

2018-10-15 22:33:27 -07:00

name_distr.h

…

name_table.c

tipc: fix the big/little endian issue in tipc_dest

2018-08-27 15:23:31 -07:00

name_table.h

tipc: fix the big/little endian issue in tipc_dest

2018-08-27 15:23:31 -07:00

net.c

tipc: fix lockdep warning when reinitilaizing sockets

2018-11-23 08:17:03 +01:00

net.h

tipc: fix lockdep warning when reinitilaizing sockets

2018-11-23 08:17:03 +01:00

netlink_compat.c

tipc: check return value of __tipc_dump_start()

2018-09-12 13:15:04 -07:00

netlink.c

tipc: switch to rhashtable iterator

2018-08-29 18:04:54 -07:00

netlink.h

…

node.c

tipc: fix lockdep warning during node delete

2018-12-05 19:32:00 +01:00

node.h

tipc: add sequence number check for link STATE messages

2018-07-11 23:06:14 -07:00

socket.c

tipc: check tsk->group in tipc_wait_for_cond()

2019-01-09 17:38:33 +01:00

socket.h

tipc: call start and done ops directly in __tipc_nl_compat_dumpit()

2018-09-06 21:49:18 -07:00

subscr.c

…

subscr.h

…

sysctl.c

…

topsrv.c

tipc: use destination length for copy string

2018-12-08 12:59:10 +01:00

topsrv.h

…

udp_media.c

tipc: compare remote and local protocols in tipc_udp_enable()

2019-01-09 17:38:34 +01:00

udp_media.h

…