Re: [PATCH] tcp/dccp: CVE-2017-8824: use-after-free in DCCP code

2017-12-04 Thread Eric Dumazet
On Mon, 2017-12-04 at 12:41 -0800, Eric Dumazet wrote: > On Mon, 2017-12-04 at 21:27 +0100, simo.ghan...@gmail.com wrote: > > From: Mohamed Ghannam > > > > Whenever the sock object is in DCCP_CLOSED state, > > dccp_disconnect() must free > > dccps_hc_tx_ccid and dccps_hc_rx_ccid and set

Re: [PATCH] tcp/dccp: CVE-2017-8824: use-after-free in DCCP code

2017-12-04 Thread Eric Dumazet
On Mon, 2017-12-04 at 21:27 +0100, simo.ghan...@gmail.com wrote: > From: Mohamed Ghannam > > Whenever the sock object is in DCCP_CLOSED state, > dccp_disconnect() must free >dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL. > > Signed-off-by: Mohamed Ghannam > --- Small nit

[PATCH] tcp/dccp: CVE-2017-8824: use-after-free in DCCP code

2017-12-04 Thread simo . ghannam
From: Mohamed Ghannam Whenever the sock object is in DCCP_CLOSED state, dccp_disconnect() must free dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL. Signed-off-by: Mohamed Ghannam --- net/dccp/proto.c | 4 1 file changed, 4 insertions(+) diff --git a/net/dccp/prot