On Tuesday, June 14, 2011 05:58:27 PM Antonio Quartulli wrote:
In recv_tt_query(), in case of error the skb is freed and then NET_RX_DROP is returned. This makes the caller function wrongly invoke kfree_skb() again. To avoid this double free recv_tt_query() has to always return NET_RX_DROP and not to free the skb.
Applied in revision 6872456.
Thanks, Marek