diff options
| author | Zhang Shurong <[email protected]> | 2023-06-23 13:39:35 +0800 |
|---|---|---|
| committer | Takashi Sakamoto <[email protected]> | 2023-06-24 14:03:46 +0900 |
| commit | 3ff256751a2853e1ffaa36958ff933ccc98c6cb5 (patch) | |
| tree | d0493ee11a33e849de85898e95300c16e99baad9 /lib/memory-notifier-error-inject.c | |
| parent | 06f45435d985d60d7d2fe2424fbb9909d177a63d (diff) | |
firewire: net: fix use after free in fwnet_finish_incoming_packet()
The netif_rx() function frees the skb so we can't dereference it to
save the skb->len.
Signed-off-by: Zhang Shurong <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Takashi Sakamoto <[email protected]>
Diffstat (limited to 'lib/memory-notifier-error-inject.c')
0 files changed, 0 insertions, 0 deletions