[AX25]: Potential ax25_uid_assoc-s leaks on module unload.
authorPavel Emelyanov <xemul@openvz.org>
Sun, 13 Apr 2008 01:33:50 +0000 (18:33 -0700)
committerDavid S. Miller <davem@davemloft.net>
Sun, 13 Apr 2008 01:33:50 +0000 (18:33 -0700)
The ax25_uid_free call walks the ax25_uid_list and releases entries
from it. The problem is that after the fisrt call to hlist_del_init
the hlist_for_each_entry (which hides behind the ax25_uid_for_each)
will consider the current position to be the last and will return.

Thus, the whole list will be left not freed.

Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ax25/ax25_uid.c

index 5f4eb73fb9d344f35fc338857444cd1d01abbb1e..57aeba729baeacd7269faec3dde027ce1a4f1506 100644 (file)
@@ -218,9 +218,11 @@ void __exit ax25_uid_free(void)
        struct hlist_node *node;
 
        write_lock(&ax25_uid_lock);
+again:
        ax25_uid_for_each(ax25_uid, node, &ax25_uid_list) {
                hlist_del_init(&ax25_uid->uid_node);
                ax25_uid_put(ax25_uid);
+               goto again;
        }
        write_unlock(&ax25_uid_lock);
 }