git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4cb6f9e) | patch
spidernet: fix racy double-free of skb
authorLinas Vepstas <linas@austin.ibm.com>
Tue, 20 Feb 2007 22:41:03 +0000 (16:41 -0600)
committerJeff Garzik <jeff@garzik.org>
Tue, 27 Feb 2007 09:16:03 +0000 (04:16 -0500)
commitd9c199ee781fa874e6feb4c56ae3d0e19f7f82a6
tree6f4975a6b8f8aa00dc2d6cf6463a385f9d736a2ctree | snapshot
parent4cb6f9e57d5d7c26d08809c1ce6310c8a7dc96d2commit | diff
spidernet: fix racy double-free of skb

It appears that under certain circumstances, a race will result
in a double-free of an skb. This patch null's out the skb pointer
upon the skb free, avoiding the inadvertent deref of bogus data.
The next patch fixes the actual race.

Signed-off-by: Linas Vepstas <linas@austin.ibm.com>
Cc: Jens Osterkamp <Jens.Osterkamp@de.ibm.com>
Cc: Kou Ishizaki <kou.ishizaki@toshiba.co.jp>
Signed-off-by: Jeff Garzik <jeff@garzik.org>
drivers/net/spider_net.c diff | blob | history
Full containers within linux kernel