]> www.infradead.org Git - users/jedix/linux-maple.git/commit
dccp: CVE-2017-8824: use-after-free in DCCP code
authorMohamed Ghannam <simo.ghannam@gmail.com>
Tue, 5 Dec 2017 20:58:35 +0000 (20:58 +0000)
committerKirtikar Kashyap <kirtikar.kashyap@oracle.com>
Wed, 10 Jan 2018 19:30:30 +0000 (11:30 -0800)
commitab0da8d7de307116642693906d632823c96873d5
tree6d701966441c38ca26a4a25b20653ce445350ccc
parent339fe6bc5baf152d511c21924e64c2fc0c22234d
dccp: CVE-2017-8824: use-after-free in DCCP code

Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
(cherry picked from commit 69c64866ce072dea1d1e59a0d61e0f66c0dffb76)

Orabug: 27290292
CVE: CVE-2017-8824

Signed-off-by: Kirtikar Kashyap <kirtikar.kashyap@oracle.com>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
net/dccp/proto.c