ipv6: fix a possible double free
authorRoy Li <rongqing.li@windriver.com>
Tue, 20 Sep 2011 19:10:16 +0000 (15:10 -0400)
committerDavid S. Miller <davem@davemloft.net>
Tue, 20 Sep 2011 19:10:16 +0000 (15:10 -0400)
commit8603e33d01cb6bd32de46b2596fe47f0c4df6c12
tree38460cb5479a4df4d3c09626998c0294767583b7
parentfe7d189d4a2ccbb3590b1da97a3f6a83fc2efd80
ipv6: fix a possible double free

When calling snmp6_alloc_dev fails, the snmp6 relevant memory
are freed by snmp6_alloc_dev. Calling in6_dev_finish_destroy
will free these memory twice.

Double free will lead that undefined behavior occurs.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Acked-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/addrconf.c