diff options
| author | Dean Jenkins <Dean_Jenkins@mentor.com> | 2017-08-07 09:50:14 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-08-07 10:10:19 -0700 |
| commit | 22889dbbd98a0e3390e9120074c39c6e5a3fea5e (patch) | |
| tree | c39bb8673bb205b0a073a33f29d3fbcca4a890ef /net/openvswitch/flow.h | |
| parent | f9ea3225ddafa269cf1f6b495d132c26fde93903 (diff) | |
asix: Add rx->ax_skb = NULL after usbnet_skb_return()
In asix_rx_fixup_internal() there is a risk that rx->ax_skb gets
reused after passing the Ethernet frame into the network stack via
usbnet_skb_return().
The risks include:
a) asynchronously freeing rx->ax_skb after passing the netdev buffer
to the NAPI layer which might corrupt the backlog queue.
b) erroneously reusing rx->ax_skb such as calling skb_put_data() multiple
times which causes writing off the end of the netdev buffer.
Therefore add a defensive rx->ax_skb = NULL after usbnet_skb_return()
so that it is not possible to free rx->ax_skb or to apply
skb_put_data() too many times.
Signed-off-by: Dean Jenkins <Dean_Jenkins@mentor.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/openvswitch/flow.h')
0 files changed, 0 insertions, 0 deletions