From: Eric Dumazet <eduma...@google.com>
Date: Tue, 27 Aug 2019 03:33:12 -0700
> Similar to the fix done for IPv4 in commit e5b1c6c6277d
> ("igmp: fix memory leak in igmpv3_del_delrec()"), we need to
> make sure mca_tomb and mca_sources are not blindly overwritten.
>
> Using swap() then a call to ip6_mc_clear_src() will take care
> of the missing free.
...
> Fixes: 1666d49e1d41 ("mld: do not remove mld souce list info when set link
> down")
> Fixes: 9c8bb163ae78 ("igmp, mld: Fix memory leak in igmpv3/mld_del_delrec()")
> Signed-off-by: Eric Dumazet <eduma...@google.com>
> Reported-by: syzbot <syzkal...@googlegroups.com>
Applied and queued up for -stable.
