mirror-linux/drivers/firewire
Zhang Shurong 9040adc38c firewire: net: fix use after free in fwnet_finish_incoming_packet()
[ Upstream commit 3ff256751a ]

The netif_rx() function frees the skb so we can't dereference it to
save the skb->len.

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Link: https://lore.kernel.org/r/tencent_3B3D24B66ED66A6BB73CC0E63C6A14E45109@qq.com
Signed-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-08-23 17:52:24 +02:00
..
Kconfig
Makefile
core-card.c Merge branch 'for-linus' into for-next 2022-05-23 07:48:27 +02:00
core-cdev.c firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region 2023-02-09 11:27:59 +01:00
core-device.c firewire: convert sysfs sprintf/snprintf family to sysfs_emit 2022-06-17 10:43:20 +02:00
core-iso.c
core-topology.c firewire: core: extend card->lock in fw_core_handle_bus_reset 2022-04-25 08:01:09 +02:00
core-transaction.c Merge branch 'for-linus' into for-next 2022-05-23 07:48:27 +02:00
core.h
init_ohci1394_dma.c
net.c firewire: net: fix use after free in fwnet_finish_incoming_packet() 2023-08-23 17:52:24 +02:00
nosy-user.h
nosy.c
nosy.h
ohci.c
ohci.h
sbp2.c firewire: remove check of list iterator against head past the loop body 2022-04-25 08:01:08 +02:00