]> rtime.felk.cvut.cz Git - socketcan-devel.git/commit
net/can bugfix: use after free bug in can protocol drivers
authorhartkopp <hartkopp@030b6a49-0b11-0410-94ab-b0dab22257f2>
Mon, 20 Jul 2009 07:11:21 +0000 (07:11 +0000)
committerhartkopp <hartkopp@030b6a49-0b11-0410-94ab-b0dab22257f2>
Mon, 20 Jul 2009 07:11:21 +0000 (07:11 +0000)
commit95efe19ecc1529ec88bc44ede8b78a7274f6a542
tree7bf54ff316517b44876c8358ae43c1f89c16f596
parent4547444813b70e7a61f5e17df38dafa5f8bff899
net/can bugfix: use after free bug in can protocol drivers

Fix a use after free bug in can protocol drivers

The release functions of the can protocol drivers lack a call to
sock_orphan() which leads to referencing freed memory under certain
circumstances.

This patch fixes a bug reported here:
https://lists.berlios.de/pipermail/socketcan-users/2009-July/000985.html

net-2.6 git commit f7e5cc0c40dff92bad2894153f675c6c542ba2f0

Signed-off-by: Lothar Wassmann <LW@KARO-electronics.de>
Acked-by: Oliver Hartkopp <oliver@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
git-svn-id: svn://svn.berlios.de//socketcan/trunk@1033 030b6a49-0b11-0410-94ab-b0dab22257f2
kernel/2.4/net/can/bcm.c
kernel/2.4/net/can/raw.c
kernel/2.6/net/can/bcm-prior-2-6-22.c
kernel/2.6/net/can/bcm.c
kernel/2.6/net/can/isotp.c
kernel/2.6/net/can/raw.c