David S. Miller e3e86b5119 ipv6: Fix leak in ipv6_gso_segment(). ...

If ip6_find_1stfragopt() fails and we return an error we have to free
up 'segs' because nobody else is going to.

Fixes: 2423496af3 ("ipv6: Prevent overrun when parsing v6 header options")
Reported-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-06-04 21:41:10 -04:00

9.4 KiB

Raw Blame History

View Raw