)]}'
{
  "commit": "9b6ff7eb666415e1558f1ba8a742f5db6a9954de",
  "tree": "2961aada1fd30146e1b32903e13fa377e67069fe",
  "parents": [
    "04f08eb44b5011493d77b602fdec29ff0f5c6cd5"
  ],
  "author": {
    "name": "Xiyu Yang",
    "email": "xiyuyang19@fudan.edu.cn",
    "time": "Thu Sep 09 12:32:00 2021 +0800"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@davemloft.net",
    "time": "Thu Sep 09 11:00:20 2021 +0100"
  },
  "message": "net/l2tp: Fix reference count leak in l2tp_udp_recv_core\n\nThe reference count leak issue may take place in an error handling\npath. If both conditions of tunnel-\u003eversion \u003d\u003d L2TP_HDR_VER_3 and the\nreturn value of l2tp_v3_ensure_opt_in_linear is nonzero, the function\nwould directly jump to label invalid, without decrementing the reference\ncount of the l2tp_session object session increased earlier by\nl2tp_tunnel_get_session(). This may result in refcount leaks.\n\nFix this issue by decrease the reference count before jumping to the\nlabel invalid.\n\nFixes: 4522a70db7aa (\"l2tp: fix reading optional fields of L2TPv3\")\nSigned-off-by: Xiyu Yang \u003cxiyuyang19@fudan.edu.cn\u003e\nSigned-off-by: Xin Xiong \u003cxiongx18@fudan.edu.cn\u003e\nSigned-off-by: Xin Tan \u003ctanxin.ctf@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "53486b162f01c176ec86c7bee4b1be5c87a7aa49",
      "old_mode": 33188,
      "old_path": "net/l2tp/l2tp_core.c",
      "new_id": "93271a2632b8ef10437a52ec931b66b631331a51",
      "new_mode": 33188,
      "new_path": "net/l2tp/l2tp_core.c"
    }
  ]
}