[IPSEC] Fix refcnt leak in xfrm_lookup

This patch fixes a refcnt leak when the policy changes on us in
xfrm_lookup.

diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
index 4c378971dacedaebe7bff2d2f17444a824ffd0e7..dcfd387ab328adebced04d22df261ec3965a91ce 100644 (file)
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -790,8 +790,10 @@ restart:
                                        goto error;
                                }
                                if (err == -EAGAIN ||
-                                   genid != atomic_read(&flow_cache_genid))
+                                   genid != atomic_read(&flow_cache_genid)) {
+                                       xfrm_pol_put(policy);
                                        goto restart;
+                               }
                        }
                        if (err)
                                goto error;