Xin Long 068d8bd338 sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close ... In sctp_close, sctp_make_abort_user may return NULL because of memory allocation failure. If this happens, it will bypass any state change and never free the assoc. The assoc has no chance to be freed and it will be kept in memory with the state it had even after the socket is closed by sctp_close(). So if sctp_make_abort_user fails to allocate memory, we should abort the asoc via sctp_primitive_ABORT as well. Just like the annotation in sctp_sf_cookie_wait_prm_abort and sctp_sf_do_9_1_prm_abort said, "Even if we can't send the ABORT due to low memory delete the TCB. This is a departure from our typical NOMEM handling". But then the chunk is NULL (low memory) and the SCTP_CMD_REPLY cmd would dereference the chunk pointer, and system crash. So we should add SCTP_CMD_REPLY cmd only when the chunk is not NULL, just like other places where it adds SCTP_CMD_REPLY cmd. Signed-off-by: Xin Long <lucien.xin@gmail.com> Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-12-30 16:57:16 -05:00
..
6lowpan	6lowpan: put mcast compression in an own function	2015-10-21 00:49:25 +02:00
9p	IB/cma: Add support for network namespaces	2015-10-28 12:32:48 -04:00
802
8021q	vlan: Do not put vlan headers back on bridge and macvlan ports	2015-11-17 14:38:35 -05:00
appletalk
atm	atm: deal with setting entry before mkip was called	2015-09-17 22:13:32 -07:00
ax25	net: add validation for the socket syscall protocol argument	2015-12-14 16:09:30 -05:00
batman-adv	batman-adv: Fix invalid stack access in batadv_dat_select_candidates	2015-12-07 22:40:21 +08:00
bluetooth	bluetooth: Validate socket address length in sco_sock_bind().	2015-12-15 15:39:08 -05:00
bridge	switchdev: bridge: Pass ageing time as clock_t instead of jiffies	2015-12-22 15:56:44 -05:00
caif	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
can	can: avoid using timeval for uapi	2015-10-13 17:42:34 +02:00
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2015-11-13 09:24:40 -08:00
core	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-12-17 14:05:22 -08:00
dcb	net/dcb: make dcbnl.c explicitly non-modular	2015-10-09 07:52:27 -07:00
dccp	ipv6: kill sk_dst_lock	2015-12-03 11:32:06 -05:00
decnet	net: add validation for the socket syscall protocol argument	2015-12-14 16:09:30 -05:00
dns_resolver	net: dns_resolver: convert time_t to time64_t	2015-11-18 16:27:46 -05:00
dsa	net: dsa: use switchdev obj for VLAN add/del ops	2015-11-01 15:56:11 -05:00
ethernet	net: help compiler generate better code in eth_get_headlen	2015-09-28 22:51:15 -07:00
hsr	net/hsr: fix a warning message	2015-11-23 14:56:15 -05:00
ieee802154	net: fix percpu memory leaks	2015-11-02 22:47:14 -05:00
ipv4	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2015-12-22 16:26:31 -05:00
ipv6	ipv6: honor ifindex in case we receive ll addresses in router advertisements	2015-12-23 22:03:54 -05:00
ipx
irda	net: add validation for the socket syscall protocol argument	2015-12-14 16:09:30 -05:00
iucv	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
key	af_key: fix two typos	2015-10-23 03:05:19 -07:00
l2tp	ipv6: add complete rcu protection around np->opt	2015-12-02 23:37:16 -05:00
l3mdev	net: Add netif_is_l3_slave	2015-10-07 04:27:43 -07:00
lapb
llc
mac80211	mac80211: handle width changes from opmode notification IE in beacon	2015-12-15 13:16:47 +01:00
mac802154	mac802154: llsec: use kzfree	2015-10-21 00:49:24 +02:00
mpls	mpls: make via address optional for multipath routes	2015-12-12 00:43:44 -05:00
netfilter	netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key	2015-12-18 14:45:45 +01:00
netlabel
netlink	mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd	2015-11-06 17:50:42 -08:00
netrom
nfc	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
openvswitch	openvswitch: Fix template leak in error cases.	2015-12-29 15:27:52 -05:00
packet	packet: Allow packets with only a header (but no payload)	2015-11-29 22:17:17 -05:00
phonet
rds	RDS: fix race condition when sending a message on unbound socket	2015-11-24 17:20:09 -05:00
rfkill	rfkill: copy the name into the rfkill struct	2015-12-10 10:37:51 +01:00
rose
rxrpc	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
sched	net_sched: make qdisc_tree_decrease_qlen() work for non mq	2015-12-15 13:41:52 -05:00
sctp	sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close	2015-12-30 16:57:16 -05:00
sunrpc	sched/wait: Fix the signal handling fix	2015-12-13 14:30:59 -08:00
switchdev	switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion	2015-11-03 13:39:21 -05:00
tipc	tipc: fix error handling of expanding buffer headroom	2015-11-24 11:26:19 -05:00
unix	af_unix: Revert 'lock_interruptible' in stream receive code	2015-12-17 15:33:47 -05:00
vmw_vsock	VSOCK: call sk->sk_data_ready() on accept()	2015-11-04 22:03:10 -05:00
wimax
wireless	nl80211: Fix potential memory leak in nl80211_connect	2015-12-15 13:11:26 +01:00
x25
xfrm	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2015-12-22 16:26:31 -05:00
compat.c
Kconfig	net: Introduce L3 Master device abstraction	2015-09-29 20:40:32 -07:00
Makefile	net: Introduce L3 Master device abstraction	2015-09-29 20:40:32 -07:00
socket.c	net, socket, socket_wq: fix missing initialization of flags	2015-12-30 16:38:01 -05:00
sysctl_net.c	net: sysctl: fix a kmemleak warning	2015-10-23 06:22:08 -07:00