Unverified Commit 4ac8b0d8 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!11117 net/iucv: fix use after free in iucv_sock_close() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/6P32SM7LYDKDACFQODTOKOUACTAI2FDU/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAKPRZ 
 
Link:https://gitee.com/openeuler/kernel/pulls/11117

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents cbbc4774 4c0dbbb1

net/iucv/af_iucv.c

+2 −2
Original line number Diff line number Diff line
@@ -450,8 +450,8 @@ static void iucv_sever_path(struct sock *sk, int with_user_data) 
	struct iucv_sock *iucv = iucv_sk(sk);

	struct iucv_path *path = iucv->path;



	if (iucv->path) {

		iucv->path = NULL;

	/* Whoever resets the path pointer, must sever and free it. */

	if (xchg(&iucv->path, NULL)) {

		if (with_user_data) {

			low_nmcpy(user_data, iucv->src_name);

			high_nmcpy(user_data, iucv->dst_name);