Unverified Commit c8f2c730 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!11115 net/iucv: fix use after free in iucv_sock_close() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/GLCIMV6JSVABQWHYDLGSNXAL54H54Q6G/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAKPRZ 
 
Link:https://gitee.com/openeuler/kernel/pulls/11115

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 48bea924 0d32791a

net/iucv/af_iucv.c

+2 −2
Original line number Diff line number Diff line
@@ -359,8 +359,8 @@ static void iucv_sever_path(struct sock *sk, int with_user_data) 
	struct iucv_sock *iucv = iucv_sk(sk);

	struct iucv_path *path = iucv->path;



	if (iucv->path) {

		iucv->path = NULL;

	/* Whoever resets the path pointer, must sever and free it. */

	if (xchg(&iucv->path, NULL)) {

		if (with_user_data) {

			low_nmcpy(user_data, iucv->src_name);

			high_nmcpy(user_data, iucv->dst_name);