From: Eric Dumazet <[email protected]> Date: Wed, 16 Aug 2017 09:41:54 -0700
> From: Eric Dumazet <[email protected]> > > syszkaller reported use-after-free in tipc [1] > > When msg->rep skb is freed, set the pointer to NULL, > so that caller does not free it again. ... > Signed-off-by: Eric Dumazet <[email protected]> > Reported-by: Dmitry Vyukov <[email protected]> Applied and queued up for -stable, thanks Eric.
