From mboxrd@z Thu Jan  1 00:00:00 1970
From: Francois Romieu <romieu@fr.zoreil.com>
Date: Sun, 11 Dec 2005 22:03:44 +0000
Subject: Re: [PATCH 1/4][DCCP]: Introduce DCCPv6
Message-Id: <20051211220344.GA31017@electric-eye.fr.zoreil.com>
List-Id: <dccp.vger.kernel.org>
References: <39e6f6c70512110556r387a6a18q37baca095737e3e0@mail.gmail.com>
In-Reply-To: <39e6f6c70512110556r387a6a18q37baca095737e3e0@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: dccp@vger.kernel.org

Arnaldo Carvalho de Melo <acme@ghostprotocols.net> :
[...]
index 0000000..23058dc
--- /dev/null
+++ b/net/dccp/ipv6.c
[...]
+static void dccp_v6_ctl_send_reset(struct sk_buff *rxskb)
+{
[...]
+	skb = alloc_skb(MAX_HEADER + sizeof(struct ipv6hdr) +
+			dccp_hdr_reset_len, GFP_ATOMIC);
+	if (skb = NULL) 
+	  	return;
[...]
+	/* sk = NULL, but it is safe for now. RST socket required. */
+	if (!ip6_dst_lookup(NULL, &skb->dst, &fl)) {
+
+		if ((xfrm_lookup(&skb->dst, &fl, NULL, 0)) < 0)
+			return;

skb leak ?

Same pattern in dccp_v6_ctl_send_ack/tcp_v6_send_{ack/reset}.

--
Ueimor