Subject: Re: [PATCH] tcp/dccp: CVE-2017-8824: use-after-free in DCCP code

From: Eric Dumazet <[email-masked]>
Date: Mon, 04 Dec 2017 12:41:00 -0800

On Mon, 2017-12-04 at 21:27 +0100, [email-masked] wrote:
> From: Mohamed Ghannam <[email-masked]>
> 
> 	Whenever the sock object is in DCCP_CLOSED state,
> dccp_disconnect() must free
> 	 dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL.
> 
> Signed-off-by: Mohamed Ghannam <[email-masked]>
> ---

Small nit : white spaces in changelog where not needed :

Whenever the sock object is in DCCP_CLOSED state, dccp_disconnect()
must free dccps_hc_tx_ccid and dccps_hc_rx_ccid and set them to NULL.

Reviewed-by: Eric Dumazet <[email-masked]>

Thanks !