From: Toshiaki Makita Date: Wed, 9 Apr 2014 08:00:30 +0000 (+0900) Subject: bridge: Fix double free and memory leak around br_allowed_ingress X-Git-Tag: v3.15-rc1~8^2~12 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eb7076182d1ae4bc4641534134ed707100d76acc;p=pandora-kernel.git bridge: Fix double free and memory leak around br_allowed_ingress br_allowed_ingress() has two problems. 1. If br_allowed_ingress() is called by br_handle_frame_finish() and vlan_untag() in br_allowed_ingress() fails, skb will be freed by both vlan_untag() and br_handle_frame_finish(). 2. If br_allowed_ingress() is called by br_dev_xmit() and br_allowed_ingress() fails, the skb will not be freed. Fix these two problems by freeing the skb in br_allowed_ingress() if it fails. Signed-off-by: Toshiaki Makita Signed-off-by: David S. Miller --- Reading git-diff-tree failed