diff options
| author | Chuck Lever <chuck.lever@oracle.com> | 2023-05-11 18:47:40 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2023-05-12 11:24:07 +0300 |
| commit | 2200c1a87074548f0a36e5aae5ad283ce2ac43b2 (patch) | |
| tree | 0bd3c03102f7d4d2552cb8206ff37a6eb7fc2c49 /net | |
| parent | b16d76fe9a27d337c16972a71d959bcf0c96c2e6 (diff) | |
| download | linux-2200c1a87074548f0a36e5aae5ad283ce2ac43b2.tar.xz | |
net/handshake: Fix handshake_dup() ref counting
If get_unused_fd_flags() fails, we ended up calling fput(sock->file)
twice.
Reported-by: Dan Carpenter <dan.carpenter@linaro.org>
Suggested-by: Paolo Abeni <pabeni@redhat.com>
Fixes: 3b3009ea8abb ("net/handshake: Create a NETLINK service for handling handshake requests")
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/handshake/netlink.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/net/handshake/netlink.c b/net/handshake/netlink.c index 7ec8a76c3c8a..f5dc170689d9 100644 --- a/net/handshake/netlink.c +++ b/net/handshake/netlink.c @@ -139,15 +139,16 @@ int handshake_nl_accept_doit(struct sk_buff *skb, struct genl_info *info) goto out_complete; } err = req->hr_proto->hp_accept(req, info, fd); - if (err) + if (err) { + fput(sock->file); goto out_complete; + } trace_handshake_cmd_accept(net, req, req->hr_sk, fd); return 0; out_complete: handshake_complete(req, -EIO, NULL); - fput(sock->file); out_status: trace_handshake_cmd_accept_err(net, req, NULL, err); return err; |