From: Xin Long <lucien....@gmail.com> Date: Sun, 16 Jun 2019 17:24:07 +0800
> Syzbot reported a memleak caused by grp members' deferredq list not > purged when the grp is be deleted. > > The issue occurs when more(msg_grp_bc_seqno(hdr), m->bc_rcv_nxt) in > tipc_group_filter_msg() and the skb will stay in deferredq. > > So fix it by calling __skb_queue_purge for each member's deferredq > in tipc_group_delete() when a tipc sk leaves the grp. > > Fixes: b87a5ea31c93 ("tipc: guarantee group unicast doesn't bypass group > broadcast") > Reported-by: syzbot+78fbe679c8ca8d264...@syzkaller.appspotmail.com > Signed-off-by: Xin Long <lucien....@gmail.com> Applied, thanks.