Re: [PATCH v2 1/1] tipc: fix double-free in tipc_buf_append()

From: patchwork-bot+netdevbpf

Date: Thu Apr 23 2026 - 15:15:09 EST


Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Tue, 21 Apr 2026 13:45:26 +0100 you wrote:
> tipc_msg_validate() can potentially reallocate the skb it is validating,
> freeing the old one. In tipc_buf_append(), it was being called with a
> pointer to a local variable which was a copy of the caller's skb
> pointer.
>
> If the skb was reallocated and validation subsequently failed, the error
> handling path would free the original skb pointer, which had already
> been freed, leading to double-free.
>
> [...]

Here is the summary with links:
- [v2,1/1] tipc: fix double-free in tipc_buf_append()
https://git.kernel.org/netdev/net/c/d293ca716e7d

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html