dccp: CVE-2017-8824: use-after-free in DCCP code
authorMohamed Ghannam <simo.ghannam@gmail.com>
Tue, 5 Dec 2017 20:58:35 +0000 (20:58 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 23 Dec 2017 00:39:51 +0000 (00:39 +0000)
commit4950440466160b8aabf6b7a190cd66009ef63678
tree88371dd2d149d5160945a28882df4cc58f55e663
parent74f74e5269213e3e7247ca564ee4defcad924bd4
dccp: CVE-2017-8824: use-after-free in DCCP code

Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name dccp-cve-2017-8824-use-after-free-in-dccp-code.patch
net/dccp/proto.c