Commit:     fcb8c156c8277ee9d71c8c81587d494c9c5240b3
Parent:     15ca36fb994923b454df44e5d7aa14b84ce5aee4
Author:     Herbert Xu <[EMAIL PROTECTED]>
AuthorDate: Sun Dec 30 21:09:38 2007 -0800
Committer:  David S. Miller <[EMAIL PROTECTED]>
CommitDate: Mon Jan 28 15:00:09 2008 -0800

    [IPSEC]: Fix double free on skb on async output
    When the output transform returns EINPROGRESS due to async operation we'll
    free the skb the straight away as if it were an error.  This patch fixes
    that so that the skb is freed when the async operation completes.
    Signed-off-by: Herbert Xu <[EMAIL PROTECTED]>
    Signed-off-by: David S. Miller <[EMAIL PROTECTED]>
 net/xfrm/xfrm_output.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/net/xfrm/xfrm_output.c b/net/xfrm/xfrm_output.c
index c1ba63e..81ad8eb 100644
--- a/net/xfrm/xfrm_output.c
+++ b/net/xfrm/xfrm_output.c
@@ -78,6 +78,8 @@ static int xfrm_output_one(struct sk_buff *skb, int err)
                err = x->type->output(x, skb);
+               if (err == -EINPROGRESS)
+                       goto out_exit;
                if (err) {
To unsubscribe from this list: send the line "unsubscribe git-commits-head" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at

Reply via email to