From: Eric Dumazet <eric.duma...@gmail.com> Date: Wed, 16 Aug 2017 09:41:54 -0700
> From: Eric Dumazet <eduma...@google.com> > > syszkaller reported use-after-free in tipc [1] > > When msg->rep skb is freed, set the pointer to NULL, > so that caller does not free it again. ... > Signed-off-by: Eric Dumazet <eduma...@google.com> > Reported-by: Dmitry Vyukov <dvyu...@google.com> Applied and queued up for -stable, thanks Eric.
