Skip to content
Commit bf185f58 authored by Ruslan Mstoi's avatar Ruslan Mstoi Committed by Jukka Rissanen
Browse files

net: ipv6: Fix crash from double free of fragment



This commit fixes crash caused by double free from message sequence
fragmentation. When double free happens the call stack is:

0  reassembly_cancel
1  handle_fragment_hdr
2  net_ipv6_process_pkt
3  process_data
4  processing_data
5  net_rx
6  process_rx_packet
7  work_q_main
8  _thread_entry

So at first packet is unrefed in reassembly_cancel and then also in
processing_data.

Signed-off-by: default avatarRuslan Mstoi <ruslan.mstoi@intel.com>
parent 460a6c77
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment