]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 318038d) | patch
zd1211rw: fix potential use-after-free bug
authorJohannes Berg <johannes@sipsolutions.net>
Wed, 7 May 2008 23:43:59 +0000 (01:43 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Tue, 13 May 2008 01:22:19 +0000 (21:22 -0400)
commit0cda00bfea22779f2361535553e141afdbe74ed3
tree046b607c669724ab4bde3108eab4c79f467eb21dtree | snapshot
parent318038d1d9917a5d6de83daedab756e7fb2567e2commit | diff
zd1211rw: fix potential use-after-free bug

zd_mac_tx_to_dev() could potentially free the skb, or hand it off
to mac80211 which might free it. Hence, this code needs to get the
usb pointer out of skb->cb before handing it off to that function.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/zd1211rw/zd_usb.c diff | blob | history
Linux Kernel Source Tree.