projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fddbfee) | patch
wil6210: use after free in wil_netif_rx_any()
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 21 Sep 2019 06:01:45 +0000 (09:01 +0300)
committerKalle Valo <kvalo@codeaurora.org>
Wed, 25 Sep 2019 06:12:20 +0000 (09:12 +0300)
commit2b481835cf4e7384b80d7762074b32a45b792d99
tree0dfb4e5bc73c489c67b47b8d3cde7ceaa5fb6d58tree | snapshot
parentfddbfeece9c7882cc47754c7da460fe427e3e85bcommit | diff
wil6210: use after free in wil_netif_rx_any()

The debug code dereferences "skb" to print "skb->len" so we have to
print the message before we free "skb".

Fixes: f99fe49ff372 ("wil6210: add wil_netif_rx() helper function")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/ath/wil6210/txrx.c diff | blob | history
Domain: System / Kernel;