Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx> wrote: > diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c b/net/ipv6/netfilter/nf_conntrack_reasm.c > index 977d890..a44c8b2 100644 > --- a/net/ipv6/netfilter/nf_conntrack_reasm.c > +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c > @@ -574,17 +574,26 @@ int nf_ct_frag6_gather(struct net *net, struct sk_buff *skb, u32 user) > struct ipv6hdr *hdr; > u8 prevhdr; > > + skb = skb_clone(skb, GFP_ATOMIC); > + if (!skb) > + return -ENOMEM; > + > /* Jumbo payload inhibits frag. header */ > if (ipv6_hdr(skb)->payload_len == 0) { > pr_debug("payload len = 0\n"); > + kfree(skb); kfree_skb ? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html