diff options
| author | David Ahern <dsahern@kernel.org> | 2022-01-03 10:05:55 -0700 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-01-11 13:58:50 +0100 |
| commit | dd74b4e027324219e51d9821c0db4368c9f8526a (patch) | |
| tree | 233415529180dd5c7f17f0b05e8836778479a712 /net | |
| parent | e183929b7db0e84a48fdc009a7bcbf9137ad9061 (diff) | |
| download | linux-dd74b4e027324219e51d9821c0db4368c9f8526a.tar.gz linux-dd74b4e027324219e51d9821c0db4368c9f8526a.tar.bz2 linux-dd74b4e027324219e51d9821c0db4368c9f8526a.zip | |
ipv6: Do cleanup if attribute validation fails in multipath route
[ Upstream commit 95bdba23b5b4aa75fe3e6c84335e638641c707bb ]
As Nicolas noted, if gateway validation fails walking the multipath
attribute the code should jump to the cleanup to free previously
allocated memory.
Fixes: 1ff15a710a86 ("ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route")
Signed-off-by: David Ahern <dsahern@kernel.org>
Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Link: https://lore.kernel.org/r/20220103170555.94638-1-dsahern@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/ipv6/route.c | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/net/ipv6/route.c b/net/ipv6/route.c index 8a437c20eecc..7e3ab23fc995 100644 --- a/net/ipv6/route.c +++ b/net/ipv6/route.c @@ -4466,12 +4466,10 @@ static int ip6_route_multipath_add(struct fib6_config *cfg, nla = nla_find(attrs, attrlen, RTA_GATEWAY); if (nla) { - int ret; - - ret = fib6_gw_from_attr(&r_cfg.fc_gateway, nla, + err = fib6_gw_from_attr(&r_cfg.fc_gateway, nla, extack); - if (ret) - return ret; + if (err) + goto cleanup; r_cfg.fc_flags |= RTF_GATEWAY; } |