net: fix double-free in bpf_lwt_xmit_reroute
authorPeter Oskolkov <posk@google.com>
Sun, 24 Feb 2019 02:25:01 +0000 (18:25 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 Feb 2019 06:24:50 +0000 (22:24 -0800)
commitbd16693f359bbab8776541c06a6df32f3996638e
treef70560333763253c64f640ef1516f2bf6d6bb5e7
parent186d93669fe0cba252d42a42ddcfdbe9f2ee101d
net: fix double-free in bpf_lwt_xmit_reroute

dst_output() frees skb when it fails (see, for example,
ip_finish_output2), so it must not be freed in this case.

Fixes: 3bd0b15281af ("bpf: add handling of BPF_LWT_REROUTE to lwt_bpf.c")
Signed-off-by: Peter Oskolkov <posk@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/core/lwt_bpf.c