netfilter: Fix potential use after free in ip6_route_me_harder()
authorSergey Popovich <popovich_sergei@mail.ru>
Thu, 8 May 2014 13:22:35 +0000 (16:22 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 11 Jun 2014 18:54:14 +0000 (11:54 -0700)
commit64db35627759552fe11de45d3787737a6fe9a3af
treeded1a7c7cffbf83587207cf5330a97b4a0b42687
parentfed542cfe4ed6077767b9e1dcf6bf2bc73c115b6
netfilter: Fix potential use after free in ip6_route_me_harder()

commit a8951d5814e1373807a94f79f7ccec7041325470 upstream.

Dst is released one line before we access it again with dst->error.

Fixes: 58e35d147128 netfilter: ipv6: propagate routing errors from
ip6_route_me_harder()

Signed-off-by: Sergey Popovich <popovich_sergei@mail.ru>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ipv6/netfilter.c