From: Herbert Xu <[EMAIL PROTECTED]>
Date: Sun, 26 Mar 2006 22:39:02 +1100

> The error handling in ipcomp6_tunnel_create is broken in two ways:
> 
> 1) If we fail to allocate an SPI (this should never happen in practice
> since there are plenty of 32-bit SPI values for us to use), we will
> still go ahead and create the SA.
> 
> 2) When xfrm_init_state fails, we first of all may trigger the BUG_TRAP
> in __xfrm_state_destroy because we didn't set the state to DEAD.  More
> importantly we end up returning the freed state as if we succeeded!
> 
> This patch fixes them both.
> 
> Signed-off-by: Herbert Xu <[EMAIL PROTECTED]>

Applied, thanks Herbert :)
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to