Re: [Patch net] tipc: fix a double free in tipc_enable_bearer()

2018-12-27 Thread David Miller
From: Cong Wang Date: Sun, 23 Dec 2018 21:45:56 -0800 > bearer_disable() already calls kfree_rcu() to free struct tipc_bearer, > we don't need to call kfree() again. > > Fixes: cb30a63384bc ("tipc: refactor function tipc_enable_bearer()") > Reported-by: syzbot+b981acf1fb240c0c1...@syzkaller.apps

[Patch net] tipc: fix a double free in tipc_enable_bearer()

2018-12-23 Thread Cong Wang
bearer_disable() already calls kfree_rcu() to free struct tipc_bearer, we don't need to call kfree() again. Fixes: cb30a63384bc ("tipc: refactor function tipc_enable_bearer()") Reported-by: syzbot+b981acf1fb240c0c1...@syzkaller.appspotmail.com Cc: Ying Xue Cc: Jon Maloy Signed-off-by: Cong Wang