projects / platform / kernel / linux-rpi3.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 07a5d38) | patch
mkiss: fix scribble on freed memory
authorAlan <gnomes@lxorguk.ukuu.org.uk>
Wed, 6 Jan 2016 14:55:02 +0000 (14:55 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 6 Jan 2016 20:06:27 +0000 (15:06 -0500)
commitfde55c45d2175bd3e33aa28ee31e4ea6efa354e1
tree6f6c4b0883f9eeda92c08641a9254c42f1f1c49btree | snapshot
parent07a5d38453599052aff0877b16bb9c1585f08609commit | diff
mkiss: fix scribble on freed memory

commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
scribble on free memory but added a new one which allows the user to
scribble even more and user controlled data into freed space.

As with 6pack we need to halt the queue before we free the buffers, because
the transmit logic is not protected by the semaphore.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/hamradio/mkiss.c diff | blob | history
Domain: System / Kernel; Licenses: GPL-2.0;