From: Cong Wang <xiyou.wangc...@gmail.com>
Date: Wed,  8 Feb 2017 10:02:13 -0800

> Dmitry reported a double free in sit_init_net():
 ...
> This is because when tunnel->dst_cache init fails, we free dev->tstats
> once in ipip6_tunnel_init() and twice in sit_init_net(). This looks
> redundant but its ndo_uinit() does not seem enough to clean up everything
> here. So avoid this by setting dev->tstats to NULL after the first free,
> at least for -net.
> 
> Reported-by: Dmitry Vyukov <dvyu...@google.com>
> Signed-off-by: Cong Wang <xiyou.wangc...@gmail.com>

Good catch, applied and queued up for -stable, thanks!

Reply via email to