From 694382d6fb097cfd399cb9d6f163c13f90a23a7f Mon Sep 17 00:00:00 2001 From: Stephen Hemminger Date: Tue, 9 Dec 2003 22:50:56 -0800 Subject: [PATCH] [ROSE]: Fix use after free in socket destruction. --- net/rose/af_rose.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/net/rose/af_rose.c b/net/rose/af_rose.c index 7d4f138a9da16..db2eb09e57896 100644 --- a/net/rose/af_rose.c +++ b/net/rose/af_rose.c @@ -359,7 +359,7 @@ void rose_destroy_socket(struct sock *sk) sk->sk_timer.data = (unsigned long)sk; add_timer(&sk->sk_timer); } else - sk_free(sk); + sock_put(sk); } /* @@ -634,7 +634,6 @@ static int rose_release(struct socket *sock) } sock->sk = NULL; - sk->sk_socket = NULL; /* Not used, but we should do this. **/ return 0; } -- 2.53.0