linux/net/ipv4
Eric Dumazet 035320d547 ipmr: dont corrupt lists
ipmr_rules_exit() and ip6mr_rules_exit() free a list of items, but
forget to properly remove these items from list. List head is not
changed and still points to freed memory.

This can trigger a fault later when icmpv6_sk_exit() is called.

Fix is to either reinit list, or use list_del() to properly remove items
from list before freeing them.

bugzilla report : https://bugzilla.kernel.org/show_bug.cgi?id=16120

Introduced by commit d1db275dd3 (ipv6: ip6mr: support multiple
tables) and commit f0ad0860d0 (ipv4: ipmr: support multiple tables)

Reported-by: Alex Zhavnerchik <alex.vizor@gmail.com>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
CC: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-06-07 02:57:14 -07:00
..
netfilter netfilter: xtables: stackptr should be percpu 2010-05-31 16:41:35 +02:00
af_inet.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
ah4.c
arp.c net: Use ip_route_input_noref() in input path 2010-05-17 17:18:51 -07:00
cipso_ipv4.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
datagram.c
devinet.c
esp4.c
fib_frontend.c
fib_hash.c
fib_lookup.h
fib_rules.c
fib_semantics.c
fib_trie.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
icmp.c net: add a noref bit on skb dst 2010-05-17 17:18:50 -07:00
igmp.c
inet_connection_sock.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
inet_diag.c
inet_fragment.c
inet_hashtables.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
inet_lro.c
inet_timewait_sock.c
inetpeer.c
ip_forward.c
ip_fragment.c
ip_gre.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
ip_input.c net: Use ip_route_input_noref() in input path 2010-05-17 17:18:51 -07:00
ip_options.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
ip_output.c net: No dst refcounting in ip_queue_xmit() 2010-05-17 17:18:52 -07:00
ip_sockglue.c net: ip_queue_rcv_skb() helper 2010-04-28 15:31:51 -07:00
ipcomp.c
ipconfig.c
ipip.c net: Introduce skb_tunnel_rx() helper 2010-05-17 22:36:55 -07:00
ipmr.c ipmr: dont corrupt lists 2010-06-07 02:57:14 -07:00
Kconfig syncookies: remove Kconfig text line about disabled-by-default 2010-06-04 15:56:01 -07:00
Makefile
netfilter.c net: add a noref bit on skb dst 2010-05-17 17:18:50 -07:00
proc.c
protocol.c
raw.c Merge branch 'master' of /repos/git/net-next-2.6 2010-05-10 18:39:28 +02:00
route.c net: implements ip_route_input_noref() 2010-05-17 17:18:51 -07:00
syncookies.c tcp: use correct net ns in cookie_v4_check() 2010-06-04 15:56:03 -07:00
sysctl_net_ipv4.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c TCP: tcp_hybla: Fix integer overflow in slow start increment 2010-06-02 07:15:48 -07:00
tcp_illinois.c
tcp_input.c net/ipv4/tcp_input.c: fix compilation breakage when FASTRETRANS_DEBUG > 1 2010-05-31 23:52:39 -07:00
tcp_ipv4.c rps: tcp: fix rps_sock_flow_table table updates 2010-06-04 15:56:02 -07:00
tcp_lp.c
tcp_minisocks.c
tcp_output.c tcp: tcp_synack_options() fix 2010-05-17 22:35:36 -07:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tcp.c net: Remove unnecessary semicolons after switch statements 2010-05-17 17:44:35 -07:00
tunnel4.c
udp_impl.h
udp.c net: sock_queue_err_skb() dont mess with sk_forward_alloc 2010-05-31 23:44:05 -07:00
udplite.c
xfrm4_input.c net: Use ip_route_input_noref() in input path 2010-05-17 17:18:51 -07:00
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c
xfrm4_state.c
xfrm4_tunnel.c