projects / openwrt / staging / stintel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9811322) | patch
lantiq: xrx200: fix use after free bug
authorAleksander Jan Bajkowski <olek2@wp.pl>
Sat, 5 Mar 2022 11:54:48 +0000 (12:54 +0100)
committerPetr Štetiar <ynezz@true.cz>
Tue, 8 Mar 2022 17:33:42 +0000 (18:33 +0100)
commitc46621b3f3fff89cce4dd5e24bd52a4337e44378
treeb6b2c7ab30ecf451ce9212e43035addab7fbde08tree | snapshot
parent98113220fa87019c01dfcf08f41730f97323858acommit | diff
lantiq: xrx200: fix use after free bug

The skb->len field is read after the packet is sent to the network
stack. In the meantime, skb can be freed. This patch fixes this bug.

Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
target/linux/lantiq/patches-5.10/0713-MIPS-lantiq-dma-increase-descritor-count.patch [deleted file] blob | history
target/linux/lantiq/patches-5.10/0713-v5.17-MIPS-lantiq-dma-increase-descritor-count.patch [new file with mode: 0644] blob
target/linux/lantiq/patches-5.10/0714-net-lantiq_xrx200-increase-napi-poll-weigth.patch [deleted file] blob | history
target/linux/lantiq/patches-5.10/0714-v5.17-net-lantiq_xrx200-increase-napi-poll-weigth.patch [new file with mode: 0644] blob
target/linux/lantiq/patches-5.10/0715-net-lantiq_xrx200-convert-to-build_skb.patch [deleted file] blob | history
target/linux/lantiq/patches-5.10/0715-v5.17-net-lantiq_xrx200-convert-to-build_skb.patch [new file with mode: 0644] blob
target/linux/lantiq/patches-5.10/0716-v5.17-net-lantiq_xrx200-fix-use-after-free-bug.patch [new file with mode: 0644] blob
Staging tree of Stijn Tintel