projects / linux / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0058f0) | patch
net: lantiq_xrx200: fix use after free bug
authorAleksander Jan Bajkowski <olek2@wp.pl>
Sat, 5 Mar 2022 11:20:39 +0000 (12:20 +0100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 7 Mar 2022 11:29:35 +0000 (11:29 +0000)
commitdd830aed23c6e07cd8e2a163742bf3d63c9add08
tree632d939d9251e0464b357b3171f2d7d78f7c3810tree | snapshot
parente0058f0fa80f6e09c4d363779c241c45a3c56b94commit | diff
net: lantiq_xrx200: fix use after free bug

The skb->len field is read after the packet is sent to the network
stack. In the meantime, skb can be freed. This patch fixes this bug.

Fixes: c3e6b2c35b34 ("net: lantiq_xrx200: add ingress SG DMA support")
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ethernet/lantiq_xrx200.c diff | blob | history
https://github.com/torvalds/linux.git