Paul Moses 57885276cc net-shapers: don't free reply skb after genlmsg_reply() ... genlmsg_reply() hands the reply skb to netlink, and netlink_unicast() consumes it on all return paths, whether the skb is queued successfully or freed on an error path. net_shaper_nl_get_doit() and net_shaper_nl_cap_get_doit() currently jump to free_msg after genlmsg_reply() fails and call nlmsg_free(msg), which can hit the same skb twice. Return the genlmsg_reply() error directly and keep free_msg only for pre-reply failures. Fixes: 4b623f9f0f ("net-shapers: implement NL get operation") Fixes: 553ea9f1ef ("net: shaper: implement introspection support") Cc: stable@vger.kernel.org Signed-off-by: Paul Moses <p@1g4.org> Link: https://patch.msgid.link/20260309173450.538026-2-p@1g4.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2026-03-10 19:29:09 -07:00
..
Makefile	…
shaper.c	net-shapers: don't free reply skb after genlmsg_reply()	2026-03-10 19:29:09 -07:00
shaper_nl_gen.c	tools: ynl-gen: add regeneration comment	2025-11-25 19:20:42 -08:00
shaper_nl_gen.h	tools: ynl-gen: add regeneration comment	2025-11-25 19:20:42 -08:00