From: Ignat Korchagin <ig...@cloudflare.com> Date: Mon, 14 Oct 2024 16:38:03 +0100 > On error can_create() frees the allocated sk object, but sock_init_data() > has already attached it to the provided sock object. This will leave a > dangling sk pointer in the sock object and may cause use-after-free later. > > Signed-off-by: Ignat Korchagin <ig...@cloudflare.com> > Reviewed-by: Vincent Mailhol <mailhol.vinc...@wanadoo.fr>
Reviewed-by: Kuniyuki Iwashima <kun...@amazon.com>
