4638faac03
sock_efree() releases the sock refcnt, if we don't hold this refcnt
when setting skb->destructor to it, the refcnt would not be balanced.
This leads to several bug reports from syzbot.
I have checked other users of sock_efree(), all of them hold the
sock refcnt.
Fixes:
|
||
---|---|---|
.. | ||
Makefile | ||
af_netrom.c | ||
nr_dev.c | ||
nr_in.c | ||
nr_loopback.c | ||
nr_out.c | ||
nr_route.c | ||
nr_subr.c | ||
nr_timer.c | ||
sysctl_net_netrom.c |