Subject: Re: [PATCH] tcp/dccp: CVE-2017-8824: use-after-free in DCCP code

From: Eric Dumazet <[email-masked]>
Date: Mon, 04 Dec 2017 12:48:28 -0800

On Mon, 2017-12-04 at 12:41 -0800, Eric Dumazet wrote:
> On Mon, 2017-12-04 at 21:27 +0100, [email-masked] wrote:
> > From: Mohamed Ghannam <[email-masked]>
> > 
> > 	Whenever the sock object is in DCCP_CLOSED state,
> > dccp_disconnect() must free
> > 	 dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL.
> > 
> > Signed-off-by: Mohamed Ghannam <[email-masked]>
> > ---
> 
> Small nit : white spaces in changelog where not needed :
> 
> Whenever the sock object is in DCCP_CLOSED state, dccp_disconnect()
> must free dccps_hc_tx_ccid and dccps_hc_rx_ccid and set them to NULL.
> 
> Reviewed-by: Eric Dumazet <[email-masked]>
> 
> Thanks !
> 

Also patch title mentions tcp, but this is not a tcp fix, only dccp

[PATCH] dccp: CVE-2017-8824: use-after-free in DCCP code