diff options
| author | Varun Prakash <varun@chelsio.com> | 2017-05-16 19:23:44 +0530 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2017-05-23 22:39:14 -0400 |
| commit | 75b61250bf687c686ba6850c34eccc1303b0b827 (patch) | |
| tree | adf54de459a66c5a251df5bb5bcd6bd72da132d2 /drivers/mailbox/mailbox-xgene-slimpro.c | |
| parent | b19775e4785996503b106e59d9d3a8839e677afd (diff) | |
scsi: libcxgbi: fix skb use after free
skb->data is assigned to task->hdr in cxgbi_conn_alloc_pdu(),
skb gets freed after tx but task->hdr is still dereferenced in
iscsi_tcp_task_xmit() to avoid this call skb_get() after allocating skb
and free the skb in cxgbi_cleanup_task() or before allocating new skb in
cxgbi_conn_alloc_pdu().
Signed-off-by: Varun Prakash <varun@chelsio.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/mailbox/mailbox-xgene-slimpro.c')
0 files changed, 0 insertions, 0 deletions