aboutsummaryrefslogtreecommitdiff
path: root/drivers/firewire
diff options
context:
space:
mode:
authorPhil Oester <kernel@linuxace.com>2013-06-19 06:49:51 -0400
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2013-07-03 10:55:37 -0700
commit491c1b809b64748ff579ae7efe4d1cd909463504 (patch)
treebb088b1e614b82c149ca4cb09de100fa3bd28b49 /drivers/firewire
parentb1e1d6fc62a376b96170eee079d5560d1718bd55 (diff)
netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling
commit 142dcdd3c25fc7a3866bb06980e8f93a2ed7e050 upstream. In commit 4cdd3408 ("netfilter: nf_conntrack_ipv6: improve fragmentation handling"), an sk_buff leak was introduced when dealing with reassembled packets by grabbing a reference to the original skb instead of the reassembled skb. At this point, the leak only impacted conntracks with an associated helper. In commit 58a317f1 ("netfilter: ipv6: add IPv6 NAT support"), the bug was expanded to include all reassembled packets with unconfirmed conntracks. Fix this by grabbing a reference to the proper reassembled skb. This closes netfilter bugzilla #823. Signed-off-by: Phil Oester <kernel@linuxace.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/firewire')
0 files changed, 0 insertions, 0 deletions