diff options
| author | Pavel Belous <[email protected]> | 2020-02-14 18:44:55 +0300 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2020-02-16 19:03:39 -0800 |
| commit | a4980919ad6a7be548d499bc5338015e1a9191c6 (patch) | |
| tree | 2fc1dcc333357d750d8ec3ac935ba97b5f030b90 /lib/mpi/mpi-internal.h | |
| parent | b42726fcf76e9367e524392e0ead7e672cc0791c (diff) | |
net: atlantic: fix use after free kasan warn
skb->len is used to calculate statistics after xmit invocation.
Under a stress load it may happen that skb will be xmited,
rx interrupt will come and skb will be freed, all before xmit function
is even returned.
Eventually, skb->len will access unallocated area.
Moving stats calculation into tx_clean routine.
Fixes: 018423e90bee ("net: ethernet: aquantia: Add ring support code")
Reported-by: Christophe Vu-Brugier <[email protected]>
Signed-off-by: Igor Russkikh <[email protected]>
Signed-off-by: Pavel Belous <[email protected]>
Signed-off-by: Dmitry Bogdanov <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-internal.h')
0 files changed, 0 insertions, 0 deletions