Ignat Korchagin 46f2a11cb8 af_packet: avoid erroring out after sock_init_data() in packet_create() ... After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free. Suggested-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Ignat Korchagin <ignat@cloudflare.com> Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com> Reviewed-by: Willem de Bruijn <willemb@google.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Link: https://patch.msgid.link/20241014153808.51894-2-ignat@cloudflare.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2024-10-15 18:43:07 -07:00
..
af_packet.c	af_packet: avoid erroring out after sock_init_data() in packet_create()	2024-10-15 18:43:07 -07:00
diag.c	net/packet: Add getsockopt support for PACKET_COPY_THRESH	2024-03-11 15:52:05 -07:00
internal.h	packet: Move reference count in packet_sock to atomic_long_t	2023-12-04 14:45:04 -08:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00