[EMAIL PROTECTED] wrote:
>
> http://bugzilla.kernel.org/show_bug.cgi?id=6187
> 
>            Summary: netlink: possible use after free in netlink_recvmsg
>     Kernel Version: 2.6.16-git
>             Status: NEW
>           Severity: normal
>              Owner: [EMAIL PROTECTED]
>          Submitter: [EMAIL PROTECTED]
> 
> 
> Spotted by Coverity's checker.
> 
> netlink_recvmsg calls netlink_cmsg_recv_pktinfo(msg, skb) on an skb that the
> checker claims may already have been freed by the preceding call to
> skb_free_datagram.
> 
> It seems possible to me that this isn't a valid bug, because the refcount on 
> the
> skb may not permit it to ever get freed through this code path.
> 
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to