tree 33b158ecdb0ed30ca22110588dc368b91a10f9ed
parent 7b996243fab46092fb3a29c773c54be8152366e4
author David Ahern <dsa@cumulusnetworks.com> 1472011527 -0700
committer David S. Miller <davem@davemloft.net> 1472019096 -0700

net: diag: Fix refcnt leak in error path destroying socket

inet_diag_find_one_icsk takes a reference to a socket that is not
released if sock_diag_destroy returns an error. Fix by changing
tcp_diag_destroy to manage the refcnt for all cases and remove
the sock_put calls from tcp_abort.

Fixes: c1e64e298b8ca ("net: diag: Support destroying TCP sockets")
Reported-by: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>