From: Sven Eckelmann <s...@narfation.org> Date: Tue, 18 Aug 2015 13:37:01 +0200
> The object tt_local is allocated with kmalloc and not initialized when the > function batadv_tt_local_add checks for the vlan. But this function can > only cleanup the object when the (not yet initialized) reference counter of > the object is 1. This is unlikely and thus the object would leak when the > vlan could not be found. > > Instead the uninitialized object tt_local has to be freed manually and the > pointer has to set to NULL to avoid calling the function which would try to > decrement the reference counter of the not existing object. > > CID: 1316518 > Fixes: 354136bcc3c4 ("batman-adv: fix kernel crash due to missing NULL > checks") > Signed-off-by: Sven Eckelmann <s...@narfation.org> Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html