iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Lv Yunlong 6d72e7c767 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send 
In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..).
If some error happens in emac_tx_fill_tpd(), the skb will be freed via
dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd().
But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len).

As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len,
thus my patch assigns skb->len to 'len' before the possible free and
use 'len' instead of skb->len later.

Fixes: b9b17debc69d2 ("net: emac: emac gigabit ethernet controller driver")
Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn>
Signed-off-by: David S. Miller <davem@davemloft.net>
2021-04-26 13:07:30 -07:00
..
accessibility
Char/Misc driver patches for 5.12-rc1
2021-02-24 10:25:37 -08:00
acpi
ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m
2021-04-07 19:02:43 +02:00
amba
amba: Make use of bus_type functions
2021-02-02 14:26:02 +01:00
android
fs: make helpers idmap mount aware
2021-01-24 14:27:20 +01:00
ata
ata: Avoid comma separated statements
2021-01-31 08:05:46 -07:00
atm
net/atm: Fix spelling mistake "requed" -> "requeued"
2021-04-23 14:10:43 -07:00
auxdisplay
auxdisplay: Remove in_interrupt() usage.
2021-03-16 16:32:40 +01:00
base
driver core: Fix locking bug in deferred_probe_timeout_work_func()
2021-04-05 09:14:18 +02:00
bcma
bcma: remove unused function
2021-04-18 09:36:56 +03:00
block
block-5.12-2021-04-02
2021-04-02 16:13:13 -07:00
bluetooth
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-04-09 20:48:35 -07:00
bus
treewide: change my e-mail address, fix my name
2021-04-09 14:54:23 -07:00
cdrom
block: remove unnecessary argument from blk_execute_rq
2021-01-24 21:52:39 -07:00
char
parisc: parisc-agp requires SBA IOMMU driver
2021-04-06 11:46:39 +02:00
clk
clk: fixed: fix double free in resource managed fixed-factor clock
2021-04-07 16:01:25 -07:00
clocksource
A small set of clockevent fixes which fell through the cracks
2021-02-22 14:11:36 -08:00
connector
…
counter
counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register
2021-03-06 16:48:09 +00:00
cpufreq
cpufreq: Fix scaling_{available,boost}_frequencies_show() comments
2021-03-26 17:43:48 +01:00
cpuidle
…
crypto
vio: make remove callback return void
2021-03-02 22:41:23 +11:00
cxl
cxl/mem: Fix memory device capacity probing
2021-04-16 18:21:56 -07:00
dax
dax: avoid -Wempty-body warnings
2021-03-22 09:20:06 -07:00
dca
…
devfreq
Merge branches 'pm-devfreq' and 'pm-tools'
2021-02-15 17:02:04 +01:00
dio
…
dma
dmaengine: idxd: fix wq cleanup of WQCFG registers
2021-04-12 22:08:39 +05:30
dma-buf
dma-fence: allow signaling drivers to set fence timestamp
2021-02-24 21:05:28 +05:30
edac
Merge branch 'edac-misc' into edac-updates-for-v5.12
2021-02-15 10:06:58 +01:00
eisa
…
extcon
extcon: Fix error handling in extcon_dev_register
2021-03-15 11:09:38 +09:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-04 14:05:45 -07:00
firmware
treewide: change my e-mail address, fix my name
2021-04-09 14:54:23 -07:00
fpga
…
fsi
…
gnss
…
gpio
gpio fixes for v5.12-rc8
2021-04-15 10:48:51 -07:00
gpu
drm/i915/display/vlv_dsi: Do not skip panel_pwr_cycle_delay when disabling the panel
2021-04-12 08:00:33 -04:00
greybus
greybus: es2: drop short control-transfer checks
2021-01-26 19:20:11 +01:00
hid
HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
2021-03-16 15:41:20 +01:00
hsi
…
hv
mm/memory_hotplug: MEMHP_MERGE_RESOURCE -> MHP_MERGE_RESOURCE
2021-02-26 09:41:00 -08:00
hwmon
Devicetree updates for v5.12:
2021-02-22 10:05:12 -08:00
hwspinlock
hwspinlock: omap: Add support for K3 AM64x SoCs
2021-02-09 11:36:50 -06:00
hwtracing
ARM updates for 5.12-rc1:
2021-02-22 14:27:07 -08:00
i2c
i2c: exynos5: correct top kerneldoc
2021-04-06 22:32:33 +02:00
i3c
I3C for 5.12
2021-02-22 09:52:55 -08:00
ide
ide-5.11-2021-02-28
2021-02-28 15:48:25 -08:00
idle
intel_idle: remove definition of DEBUG
2021-01-22 16:46:16 +01:00
iio
First set of IIO and counter fixes for the 5.12 cycle
2021-03-15 16:34:39 +01:00
infiniband
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-04-09 20:48:35 -07:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2021-04-15 10:23:44 -07:00
interconnect
interconnect: Fix kerneldoc warning
2021-03-18 23:46:21 +02:00
iommu
iommu/tegra-smmu: Make tegra_smmu_probe_device() to handle all IOMMU phandles
2021-03-18 11:31:12 +01:00
ipack
ipack: Handle a driver without remove callback
2021-02-09 09:48:23 +01:00
irqchip
irqchip/ingenic: Add support for the JZ4760
2021-03-09 08:45:17 +00:00
isdn
mISDN: Use LIST_HEAD() for list_head
2021-03-30 13:34:42 -07:00
leds
treewide: change my e-mail address, fix my name
2021-04-09 14:54:23 -07:00
lightnvm
lightnvm: pblk: Replace guid_copy() with export_guid()/import_guid()
2021-02-14 21:27:24 -07:00
macintosh
macintosh/adb-iop: Use big-endian autopoll mask
2021-01-25 13:23:38 +01:00
mailbox
treewide: change my e-mail address, fix my name
2021-04-09 14:54:23 -07:00
mcb
…
md
dm verity fec: fix misaligned RS roots IO
2021-04-14 14:28:29 -04:00
media
module: remove never implemented MODULE_SUPPORTED_DEVICE
2021-03-17 13:16:18 -07:00
memory
Char/Misc driver patches for 5.12-rc1
2021-02-24 10:25:37 -08:00
memstick
…
message
scsi: message: fusion: Fix 'physical' typos
2021-01-26 23:25:16 -05:00
mfd
mfd: intel_quark_i2c_gpio: Revert "Constify static struct resources"
2021-03-23 09:14:12 +00:00
misc
mei: allow map and unmap of client dma buffer only for disconnected client
2021-03-23 15:15:15 +01:00
mmc
mmc: cqhci: Fix random crash when remove mmc module/card
2021-03-09 10:00:52 +01:00
most
most: core: Constify static attribute_group structs
2021-01-26 19:24:51 +01:00
mtd
This pull request contains the following bug fix for MTD:
2021-04-13 14:01:34 -07:00
mux
…
net
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
2021-04-26 13:07:30 -07:00
nfc
nfc: st-nci: remove unnecessary label
2021-04-13 14:50:57 -07:00
ntb
NTB: Add support for EPF PCI Non-Transparent Bridge
2021-02-23 14:12:53 -06:00
nubus
…
nvdimm
libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
2021-04-09 21:56:01 -07:00
nvme
nvmet-tcp: fix kmap leak when data digest in use
2021-03-18 05:39:18 +01:00
nvmem
nvmem: qcom-spmi-sdam: Fix uninitialized pdev pointer
2021-02-05 11:25:52 +01:00
of
of: net: fix of_get_mac_addr_nvmem() for non-platform devices
2021-04-13 14:35:02 -07:00
opp
opp: Don't drop extra references to OPPs accidentally
2021-03-12 09:26:52 +05:30
parisc
…
parport
module: remove never implemented MODULE_SUPPORTED_DEVICE
2021-03-17 13:16:18 -07:00
pci
Merge branch 'mlx5-next' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux
2021-04-09 18:07:21 -07:00
pcmcia
Merge branch 'pcmcia-next' of git://git.kernel.org/pub/scm/linux/kernel/git/brodo/linux
2021-02-26 13:54:43 -08:00
perf
perf/arm_dmc620_pmu: Fix error return code in dmc620_pmu_device_probe()
2021-03-12 11:30:31 +00:00
phy
time64.h: Consolidated PSEC_PER_SEC definition
2021-04-06 16:32:17 -07:00
pinctrl
intel-pinctrl for v5.12-3
2021-03-30 00:46:49 +02:00
platform
platform/x86: intel-hid: Fix spurious wakeups caused by tablet-mode events during suspend
2021-04-06 22:10:21 +02:00
pnp
PNP: pnpbios: Use DEFINE_SPINLOCK() for spinlock
2021-01-22 16:22:57 +01:00
power
power-supply: use kobj_to_dev()
2021-01-28 01:31:42 +01:00
powercap
powercap/drivers/dtpm: Add the experimental label to the option description
2021-03-01 17:43:29 +01:00
pps
…
ps3
…
ptp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-03-25 15:31:22 -07:00
pwm
pwm: Changes for v5.12-rc1
2021-02-25 12:23:49 -08:00
rapidio
rapidio: fix kernel-doc a markup
2021-01-21 14:06:00 -07:00
ras
RAS/CEC: Correct ce_add_elem()'s returned values
2021-04-07 11:52:26 +02:00
regulator
regulator: bd9571mwv: Convert device attribute to sysfs_emit()
2021-03-15 15:42:12 +00:00
remoteproc
remoteproc: pru: Fix firmware loading crashes on K3 SoCs
2021-03-17 14:15:07 -05:00
reset
RISC-V Patches for the 5.12 Merge Window
2021-02-26 10:28:35 -08:00
rpmsg
…
rtc
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-02-27 08:07:12 -08:00
s390
mld: convert ifmcaddr6 to RCU
2021-03-26 15:14:56 -07:00
sbus
module: remove never implemented MODULE_SUPPORTED_DEVICE
2021-03-17 13:16:18 -07:00
scsi
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-04-17 11:08:07 -07:00
sh
module: remove never implemented MODULE_SUPPORTED_DEVICE
2021-03-17 13:16:18 -07:00
siox
…
slimbus
…
soc
ARM SoC fixes for v5.12, part 2
2021-04-07 09:26:50 -07:00
soundwire
ALSA: hda: move Intel SoundWire ACPI scan to dedicated module
2021-03-02 15:33:00 +01:00
spi
spi: cadence: set cqspi to the driver_data field of struct device
2021-03-11 13:32:32 +00:00
spmi
spmi: spmi-pmic-arb: Fix hw_irq overflow
2021-02-12 12:26:46 +01:00
ssb
…
staging
of: net: pass the dst buffer to of_get_mac_address()
2021-04-13 14:35:02 -07:00
target
scsi: target: iscsi: Fix zero tag inside a trace event
2021-04-05 23:09:37 -04:00
tc
…
tee
module: remove never implemented MODULE_SUPPORTED_DEVICE
2021-03-17 13:16:18 -07:00
thermal
thermal/core: Add NULL pointer check before using cooling device stats
2021-03-17 09:55:58 +01:00
thunderbolt
thunderbolt: Fix off by one in tb_port_find_retimer()
2021-03-30 13:38:10 +03:00
tty
Serial driver fix for 5.12-rc6
2021-04-03 10:00:53 -07:00
uio
uio: uio_pci_generic: don't fail probe if pdev->irq equals to IRQ_NOTCONNECTED
2021-02-09 12:25:32 +01:00
usb
usbip: synchronize event handler with sysfs code paths
2021-04-05 09:05:42 +02:00
vdpa
vdpa/mlx5: Fix suspend/resume index restoration
2021-04-09 12:08:28 -04:00
vfio
vfio/pci: Add missing range check in vfio_pci_mmap
2021-04-13 08:29:16 -06:00
vhost
virtio: fixes, cleanups
2021-03-18 11:20:35 -07:00
video
hyperv-fixes for 5.12-rc6
2021-04-03 10:42:20 -07:00
virt
virt: acrn: Correct type casting of argument of copy_from_user()
2021-03-10 16:59:50 +01:00
virtio
virtio: fixes, cleanups
2021-03-18 11:20:35 -07:00
visorbus
…
vlynq
…
vme
vme: make remove callback return void
2021-02-09 12:15:07 +01:00
w1
w1: w1_therm: Fix conversion result for negative temperatures
2021-01-27 14:59:16 +01:00
watchdog
treewide: change my e-mail address, fix my name
2021-04-09 14:54:23 -07:00
xen
xen: branch for v5.12-rc7
2021-04-09 09:58:42 -07:00
zorro
…
Kconfig
cxl/mem: Introduce a driver for CXL-2.0-Type-3 endpoints
2021-02-16 20:36:38 -08:00
Makefile
Simple Firmware Interface (SFI) support removal for v5.12-rc1
2021-02-24 10:35:29 -08:00