git://git.onelab.eu
/
sliver-openvswitch.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
vport-capwap: Fix use-after-free on error path.
[sliver-openvswitch.git]
/
datapath
/
vport-capwap.c
diff --git
a/datapath/vport-capwap.c
b/datapath/vport-capwap.c
index
3fb4ffb
..
8d78b6d
100644
(file)
--- a/
datapath/vport-capwap.c
+++ b/
datapath/vport-capwap.c
@@
-507,13
+507,13
@@
static struct sk_buff *fragment(struct sk_buff *skb, const struct vport *vport,
remaining -= frag_size;
}
- goto out;
+ consume_skb(skb);
+ return result;
error:
tnl_free_linked_skbs(result);
-out:
kfree_skb(skb);
- return
result
;
+ return
NULL
;
}
/* All of the following functions relate to fragmentation reassembly. */