net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow
authorAlaa Hleihel <alaa@mellanox.com>
Wed, 19 Aug 2020 15:24:10 +0000 (18:24 +0300)
committerDavid S. Miller <davem@davemloft.net>
Thu, 20 Aug 2020 23:39:31 +0000 (16:39 -0700)
commiteda814b97dfb8d9f4808eb2f65af9bd3705c4cae
treecaac1541309a67e607993592661a6ee2838ea7d5
parentab921f3cdbec01c68705a7ade8bec628d541fc2b
net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow

tcf_ct_handle_fragments() shouldn't free the skb when ip_defrag() call
fails. Otherwise, we will cause a double-free bug.
In such cases, just return the error to the caller.

Fixes: b57dc7c13ea9 ("net/sched: Introduce action ct")
Signed-off-by: Alaa Hleihel <alaa@mellanox.com>
Reviewed-by: Roi Dayan <roid@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sched/act_ct.c