diff options
author | Raveendran Somu <[email protected]> | 2020-03-25 03:20:25 -0500 |
---|---|---|
committer | Kalle Valo <[email protected]> | 2020-03-26 11:43:53 +0200 |
commit | 78179869dc3f5c0059bbf5d931a2717f1ad97ecd (patch) | |
tree | d281e4e3f0819ac285eb4b718ad1311e648ba3ec /scripts/gcc-plugins/cyc_complexity_plugin.c | |
parent | 93a5bfbc7cad8bf3dea81c9bc07761c1226a0860 (diff) |
brcmfmac: Fix double freeing in the fmac usb data path
When the brcmf_fws_process_skb() fails to get hanger slot for
queuing the skb, it tries to free the skb.
But the caller brcmf_netdev_start_xmit() of that funciton frees
the packet on error return value.
This causes the double freeing and which caused the kernel crash.
Signed-off-by: Raveendran Somu <[email protected]>
Signed-off-by: Chi-hsien Lin <[email protected]>
Signed-off-by: Kalle Valo <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Diffstat (limited to 'scripts/gcc-plugins/cyc_complexity_plugin.c')
0 files changed, 0 insertions, 0 deletions