diff options
| author | Wang Hai <wanghai38@huawei.com> | 2022-11-16 01:24:07 +0800 |
|---|---|---|
| committer | Tony Nguyen <anthony.l.nguyen@intel.com> | 2022-11-23 08:38:22 -0800 |
| commit | 45605c75c52c7ae7bfe902214343aabcfe5ba0ff (patch) | |
| tree | ed0db8f957502ac4256ffd5b119d5788c79f4d90 /drivers/video | |
| parent | 227d8d2f7f2278b8468c5531b0cd0f2a905b4486 (diff) | |
e100: Fix possible use after free in e100_xmit_prepare
In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so
e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will
resend the skb. But the skb is already freed, which will cause UAF bug
when the upper layer resends the skb.
Remove the harmful free.
Fixes: 5e5d49422dfb ("e100: Release skb when DMA mapping is failed in e100_xmit_prepare")
Signed-off-by: Wang Hai <wanghai38@huawei.com>
Reviewed-by: Alexander Duyck <alexanderduyck@fb.com>
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>
Diffstat (limited to 'drivers/video')
0 files changed, 0 insertions, 0 deletions