Files
linux/net/ipv4
Li RongQing 9b42d55a66 tcp: release sk_frag.page in tcp_disconnect
socket can be disconnected and gets transformed back to a listening
socket, if sk_frag.page is not released, which will be cloned into
a new socket by sk_clone_lock, but the reference count of this page
is increased, lead to a use after free or double free issue

Signed-off-by: Li RongQing <lirongqing@baidu.com>
Cc: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-01-29 17:56:23 -05:00
..
2018-01-24 19:13:45 -05:00
2017-10-21 01:33:19 +01:00
2018-01-24 19:13:45 -05:00
2017-10-12 22:57:11 -07:00
2018-01-02 14:27:29 -05:00
2017-10-16 21:24:25 +01:00
2018-01-25 16:41:14 -08:00