net/can bugfix: use after free bug in can protocol drivers

[safe/jmp/linux-2.6] / net / can / raw.c

diff --git a/net/can/raw.c b/net/can/raw.c
index 6aa154e..3482546 100644 (file)
--- a/net/can/raw.c
+++ b/net/can/raw.c
@@ -306,6 +306,9 @@ static int raw_release(struct socket *sock)
        ro->bound   = 0;
        ro->count   = 0;
 
+       sock_orphan(sk);
+       sock->sk = NULL;
+
        release_sock(sk);
        sock_put(sk);