dccp: CVE-2017-8824: use-after-free in DCCP code
authorMohamed Ghannam <simo.ghannam@gmail.com>
Tue, 5 Dec 2017 20:58:35 +0000 (20:58 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 14 Jan 2018 19:45:05 +0000 (19:45 +0000)
commit6a2f385f6972c7f222aad7b781bd91261bd919f3
treead3b7fa9dacb61965c89f350e633ea79dc551f55
parent86d11e004141c20bee4a1281efcac15ece494c9f
dccp: CVE-2017-8824: use-after-free in DCCP code

Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name dccp-cve-2017-8824-use-after-free-in-dccp-code.patch
net/dccp/proto.c