David S. Miller 9e927fb618 [PATCH] Wrong return value corrupts free object in e1000 driver
For some reason, E1000's ->hard_start_xmit() routine returns -EFAULT
instead of one of the NETDEV_TX_* error codes.  In fact, it frees up
the SKB before returning this.  This makes the queueing layer think
the packet should be requeued and subsequently we corrupt a freed
object.

Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Jeff Garzik <jeff@garzik.org>
2006-03-11 13:25:17 -05:00
..
2006-02-13 22:30:10 -08:00
2006-03-09 19:47:37 -08:00
2006-02-28 20:53:43 -08:00
2006-01-14 10:41:42 -08:00
2006-01-10 00:08:17 +01:00
2006-01-18 19:20:31 -08:00