diff options
| author | Sabrina Dubroca <sd@queasysnail.net> | 2025-10-16 12:39:14 +0200 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2025-10-21 10:42:43 +0200 |
| commit | 5502bc4746e86bfe91ecbe0ed1ad53cb17673920 (patch) | |
| tree | 7b6eef62705e79f23a8d05abec460ff062720d5b /net/unix/af_unix.c | |
| parent | 10deb69864840ccf96b00ac2ab3a2055c0c04721 (diff) | |
xfrm: make state as DEAD before final put when migrate fails
xfrm_state_migrate/xfrm_state_clone_and_setup create a new state, and
call xfrm_state_put to destroy it in case of
failure. __xfrm_state_destroy expects the state to be in
XFRM_STATE_DEAD, but we currently don't do that.
Reported-by: syzbot+5cd6299ede4d4f70987b@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=5cd6299ede4d4f70987b
Fixes: 78347c8c6b2d ("xfrm: Fix xfrm_state_migrate leak")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions