sctp: Do not leak memory on multiple listen() calls
authorVlad Yasevich <vladislav.yasevich@hp.com>
Sat, 19 Jul 2008 06:06:07 +0000 (23:06 -0700)
committerDavid S. Miller <davem@davemloft.net>
Sat, 19 Jul 2008 06:06:07 +0000 (23:06 -0700)
SCTP permits multiple listen call and on subsequent calls
we leak he memory allocated for the crypto transforms.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sctp/socket.c

index a0e879bb202dcb1ad5b0e9a042c03e37daf25b6b..fd7ed9d46a487b58337d9f7fd36dbbc871df6335 100644 (file)
@@ -5773,7 +5773,7 @@ int sctp_inet_listen(struct socket *sock, int backlog)
                goto out;
 
        /* Allocate HMAC for generating cookie. */
-       if (sctp_hmac_alg) {
+       if (!sctp_sk(sk)->hmac && sctp_hmac_alg) {
                tfm = crypto_alloc_hash(sctp_hmac_alg, 0, CRYPTO_ALG_ASYNC);
                if (IS_ERR(tfm)) {
                        if (net_ratelimit()) {
@@ -5801,7 +5801,8 @@ int sctp_inet_listen(struct socket *sock, int backlog)
                goto cleanup;
 
        /* Store away the transform reference. */
-       sctp_sk(sk)->hmac = tfm;
+       if (!sctp_sk(sk)->hmac)
+               sctp_sk(sk)->hmac = tfm;
 out:
        sctp_release_sock(sk);
        return err;