firewire: net: fix use after free in fwnet_finish_incoming_packet()
authorZhang Shurong <zhang_shurong@foxmail.com>
Fri, 23 Jun 2023 05:39:35 +0000 (13:39 +0800)
committerTakashi Sakamoto <o-takashi@sakamocchi.jp>
Sat, 24 Jun 2023 05:03:46 +0000 (14:03 +0900)
commit3ff256751a2853e1ffaa36958ff933ccc98c6cb5
treed0493ee11a33e849de85898e95300c16e99baad9
parent06f45435d985d60d7d2fe2424fbb9909d177a63d
firewire: net: fix use after free in fwnet_finish_incoming_packet()

The netif_rx() function frees the skb so we can't dereference it to
save the skb->len.

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Link: https://lore.kernel.org/r/tencent_3B3D24B66ED66A6BB73CC0E63C6A14E45109@qq.com
Signed-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>
drivers/firewire/net.c