linux/net
Lothar Waßmann f7e5cc0c40 net/can bugfix: use after free bug in can protocol drivers
Fix a use after free bug in can protocol drivers

The release functions of the can protocol drivers lack a call to
sock_orphan() which leads to referencing freed memory under certain
circumstances.

This patch fixes a bug reported here:
https://lists.berlios.de/pipermail/socketcan-users/2009-July/000985.html

Signed-off-by: Lothar Wassmann <LW@KARO-electronics.de>
Acked-by: Oliver Hartkopp <oliver@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-07-15 11:20:37 -07:00
..
9p net/9p: Fix crash due to bad mount parameters. 2009-07-02 13:17:01 -07:00
802
8021q
appletalk
atm net: adding memory barrier to the poll and receive callbacks 2009-07-09 17:06:57 -07:00
ax25
bluetooth
bridge
can net/can bugfix: use after free bug in can protocol drivers 2009-07-15 11:20:37 -07:00
core net: sk_prot_alloc() should not blindly overwrite memory 2009-07-11 20:26:19 -07:00
dcb
dccp net: adding memory barrier to the poll and receive callbacks 2009-07-09 17:06:57 -07:00
decnet
dsa dsa: fix 88e6xxx statistics counter snapshotting 2009-07-05 18:03:35 -07:00
econet
ethernet
ieee802154
ipv4 gre: fix ToS/DiffServ inherit bug 2009-07-14 09:35:59 -07:00
ipv6 sit: fix regression: do not release skb->dst before xmit 2009-07-11 20:30:52 -07:00
ipx
irda
iucv net: adding memory barrier to the poll and receive callbacks 2009-07-09 17:06:57 -07:00
key
lapb
llc
mac80211 mac80211: minstrel: avoid accessing negative indices in rix_to_ndx() 2009-07-07 12:55:28 -04:00
netfilter
netlabel
netlink
netrom
packet
phonet
rds
rfkill
rose
rxrpc net: adding memory barrier to the poll and receive callbacks 2009-07-09 17:06:57 -07:00
sched
sctp sctp: fix warning at inet_sock_destruct() while release sctp socket 2009-07-06 12:47:08 -07:00
sunrpc
tipc
unix net: adding memory barrier to the poll and receive callbacks 2009-07-09 17:06:57 -07:00
wanrouter
wimax
wireless cfg80211: fix refcount leak 2009-07-07 12:55:28 -04:00
x25
xfrm xfrm: use xfrm_addr_cmp() instead of compare addresses directly 2009-06-29 19:41:46 -07:00
compat.c
Kconfig
Makefile
nonet.c
socket.c
sysctl_net.c
TUNABLE