]> git.baikalelectronics.ru Git - kernel.git/commit
mkiss: fix scribble on freed memory
authorAlan <gnomes@lxorguk.ukuu.org.uk>
Wed, 6 Jan 2016 14:55:02 +0000 (14:55 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 6 Jan 2016 20:06:27 +0000 (15:06 -0500)
commit88a4a2e8ceccdb548766bcf0ac256738796cb6fa
tree6f6c4b0883f9eeda92c08641a9254c42f1f1c49b
parentc56a6888c39662b1c8564bc2f2ca970f4e0ff46b
mkiss: fix scribble on freed memory

commit c53d2122e3b634fb49ca1ff4bb53c6d8d5966da3 fixed a user triggerable
scribble on free memory but added a new one which allows the user to
scribble even more and user controlled data into freed space.

As with 6pack we need to halt the queue before we free the buffers, because
the transmit logic is not protected by the semaphore.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/hamradio/mkiss.c