Zhang Shurong 2ea70379e4 firewire: net: fix use after free in fwnet_finish_incoming_packet() ...

[ Upstream commit 3ff256751a ]

The netif_rx() function frees the skb so we can't dereference it to
save the skb->len.

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Link: https://lore.kernel.org/r/tencent_3B3D24B66ED66A6BB73CC0E63C6A14E45109@qq.com
Signed-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-08-26 14:23:24 +02:00

..

core-card.c

firewire: core: extend card->lock in fw_core_handle_bus_reset

2022-05-12 12:30:05 +02:00

core-cdev.c

firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region

2023-02-09 11:26:32 +01:00

core-device.c

…

core-iso.c

…

core-topology.c

firewire: core: extend card->lock in fw_core_handle_bus_reset

2022-05-12 12:30:05 +02:00

core-transaction.c

firewire: remove check of list iterator against head past the loop body

2022-05-12 12:30:05 +02:00

core.h

…

init_ohci1394_dma.c

…

Kconfig

…

Makefile

…

net.c

firewire: net: fix use after free in fwnet_finish_incoming_packet()

2023-08-26 14:23:24 +02:00

nosy-user.h

…

nosy.c

…

nosy.h

…

ohci.c

…

ohci.h

…

sbp2.c

firewire: remove check of list iterator against head past the loop body

2022-05-12 12:30:05 +02:00