git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 596f2d0) | patch
[PATCH] drivers/net/wireless/libertas/rx.c: fix use-after-free
authorEugene Teo <eugeneteo@kernel.sg>
Mon, 21 May 2007 14:30:22 +0000 (22:30 +0800)
committerJohn W. Linville <linville@tuxdriver.com>
Tue, 22 May 2007 15:02:29 +0000 (11:02 -0400)
commit412e8a0ebf1a58c060cc76438e5b6d33789c5e20
treec91d0ff90683badafde8662564274d009e57fe79tree | snapshot
parent596f2d0554352f1089f7478b309b27d8cdf5cd4fcommit | diff
[PATCH] drivers/net/wireless/libertas/rx.c: fix use-after-free

skb could have been freed by then. Also, in libertas_upload_rx_packet(),
skb->protocol is initialized by eth_type_trans().

Signed-off-by: Eugene Teo <eugeneteo@kernel.sg>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/libertas/rx.c diff | blob | history
Full containers within linux kernel