diff options
author | Raveendran Somu <raveendran.somu@cypress.com> | 2020-03-25 03:20:25 -0500 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-10-01 13:17:49 +0200 |
commit | 1ed8ad92378726b4f8e93abfa41086b08c0d8984 (patch) | |
tree | 28b78a4aeb3995c2af34d05380952cbf12b83f28 /fs | |
parent | 9aca5e655a29f8ae0f762043e397422f5d8360cf (diff) |
brcmfmac: Fix double freeing in the fmac usb data path
[ Upstream commit 78179869dc3f5c0059bbf5d931a2717f1ad97ecd ]
When the brcmf_fws_process_skb() fails to get hanger slot for
queuing the skb, it tries to free the skb.
But the caller brcmf_netdev_start_xmit() of that funciton frees
the packet on error return value.
This causes the double freeing and which caused the kernel crash.
Signed-off-by: Raveendran Somu <raveendran.somu@cypress.com>
Signed-off-by: Chi-hsien Lin <chi-hsien.lin@cypress.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/1585124429-97371-3-git-send-email-chi-hsien.lin@cypress.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions