Jeff Hansen 30df94f800 bridge: Fix double-free in br_add_if. ...

There is a potential double-kfree in net/bridge/br_if.c.  If br_fdb_insert
fails, then the kobject is put back (which calls kfree due to the kobject
release), and then kfree is called again on the net_bridge_port.  This
patch fixes the crash.

Thanks to Stephen Hemminger for the one-line fix.

Signed-off-by: Jeff Hansen <x@jeffhansen.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2009-09-28 12:54:25 -07:00

..

netfilter

…

br_device.c

…

br_fdb.c

…

br_forward.c

…

br_if.c

bridge: Fix double-free in br_add_if.

2009-09-28 12:54:25 -07:00

br_input.c

…

br_ioctl.c

…

br_netfilter.c

sysctl: remove "struct file *" argument of ->proc_handler

2009-09-24 07:21:04 -07:00

br_netlink.c

…

br_notify.c

…

br_private_stp.h

…

br_private.h

…

br_stp_bpdu.c

…

br_stp_if.c

…

br_stp_timer.c

…

br_stp.c

…

br_sysfs_br.c

…

br_sysfs_if.c

…

br.c

…

Kconfig

…

Makefile

…