forked from mirrors/linux
sock_efree() releases the sock refcnt, if we don't hold this refcnt
when setting skb->destructor to it, the refcnt would not be balanced.
This leads to several bug reports from syzbot.
I have checked other users of sock_efree(), all of them hold the
sock refcnt.
Fixes:
|
||
|---|---|---|
| .. | ||
| af_netrom.c | ||
| Makefile | ||
| nr_dev.c | ||
| nr_in.c | ||
| nr_loopback.c | ||
| nr_out.c | ||
| nr_route.c | ||
| nr_subr.c | ||
| nr_timer.c | ||
| sysctl_net_netrom.c | ||