]> git.baikalelectronics.ru Git - kernel.git/commit
mkiss: fix scribble on freed memory
authorAlan <gnomes@lxorguk.ukuu.org.uk>
Wed, 6 Jan 2016 14:55:02 +0000 (14:55 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 6 Jan 2016 20:06:27 +0000 (15:06 -0500)
commita767c0831544f379b73beb3817270f4733e49a37
tree6f6c4b0883f9eeda92c08641a9254c42f1f1c49b
parent3e0aa472089862e96aba2b95b37f41417e82cdcc
mkiss: fix scribble on freed memory

commit c8e29f9fc28f6886a0535f5894e7f608b68efdc8 fixed a user triggerable
scribble on free memory but added a new one which allows the user to
scribble even more and user controlled data into freed space.

As with 6pack we need to halt the queue before we free the buffers, because
the transmit logic is not protected by the semaphore.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/hamradio/mkiss.c