From: Cong Wang <[email protected]>
Date: Wed,  8 Feb 2017 10:02:13 -0800

> Dmitry reported a double free in sit_init_net():
 ...
> This is because when tunnel->dst_cache init fails, we free dev->tstats
> once in ipip6_tunnel_init() and twice in sit_init_net(). This looks
> redundant but its ndo_uinit() does not seem enough to clean up everything
> here. So avoid this by setting dev->tstats to NULL after the first free,
> at least for -net.
> 
> Reported-by: Dmitry Vyukov <[email protected]>
> Signed-off-by: Cong Wang <[email protected]>

Good catch, applied and queued up for -stable, thanks!

Reply via email to