diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2016-11-24 06:13:22 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-11-24 06:13:22 -0800 |
| commit | 065421c6fa6fe9f0c15a11ba0a58e8bba5e890d7 (patch) | |
| tree | b1d8b9806ec43507107b2fcf80811dc7630c32d0 | |
| parent | 091685a6a4981ac01ab0ec61aa6d46b9d3ded294 (diff) | |
| parent | 29c1418082b25c7344fe31dc335a63cd6558e92a (diff) | |
Merge "tcp: fix use after free in tcp_xmit_retransmit_queue()"
| -rw-r--r-- | include/net/tcp.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/net/tcp.h b/include/net/tcp.h index 213601d620e0..52402ab90c57 100644 --- a/include/net/tcp.h +++ b/include/net/tcp.h @@ -1528,6 +1528,8 @@ static inline void tcp_check_send_head(struct sock *sk, struct sk_buff *skb_unli { if (sk->sk_send_head == skb_unlinked) sk->sk_send_head = NULL; + if (tcp_sk(sk)->highest_sack == skb_unlinked) + tcp_sk(sk)->highest_sack = NULL; } static inline void tcp_init_send_head(struct sock *sk) |