On Wed, 2006-07-19 at 14:57 -0700, Stephen Hemminger wrote: > This should fix the problem reported in > http://bugzilla.kernel.org/show_bug.cgi?id=6186 > where the skb is used after freed. The code in IP multicast route. > > Code was reusing an skb which could lead to use after free or double free.
> +
> + iskb = alloc_skb(sizeof(struct iphdr), GFP_KERNEL);
> + if (!iskb) {
> + read_unlock(&mrt_lock);
> + return -ENOMEM;
> + }
GFP_KERNEL allocation under read_lock()?
--
/Martin
signature.asc
Description: This is a digitally signed message part
