sst-linux/net/mctp
Jeremy Kerr 6c6f477f64 net: mctp: handle skb cleanup on sock_queue failures
[ Upstream commit ce1219c3f76bb131d095e90521506d3c6ccfa086 ]

Currently, we don't use the return value from sock_queue_rcv_skb, which
means we may leak skbs if a message is not successfully queued to a
socket.

Instead, ensure that we're freeing the skb where the sock hasn't
otherwise taken ownership of the skb by adding checks on the
sock_queue_rcv_skb() to invoke a kfree on failure.

In doing so, rather than using the 'rc' value to trigger the
kfree_skb(), use the skb pointer itself, which is more explicit.

Also, add a kunit test for the sock delivery failure cases.

Fixes: 4a992bbd36 ("mctp: Implement message fragmentation & reassembly")
Cc: stable@vger.kernel.org
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Link: https://patch.msgid.link/20241218-mctp-next-v2-1-1c1729645eaa@codeconstruct.com.au
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-01-09 13:29:57 +01:00
..
test
af_mctp.c mctp: Handle error of rtnl_register_module(). 2024-10-17 15:22:23 +02:00
device.c mctp: Handle error of rtnl_register_module(). 2024-10-17 15:22:23 +02:00
Kconfig
Makefile
neigh.c mctp: Handle error of rtnl_register_module(). 2024-10-17 15:22:23 +02:00
route.c net: mctp: handle skb cleanup on sock_queue failures 2025-01-09 13:29:57 +01:00