Heiner Kallweit 6fcf4141b9 r8169: fix potential skb double free in an error path ...

[ Upstream commit cc6528bc9a ]

The caller of rtl8169_tso_csum_v2() frees the skb if false is returned.
eth_skb_pad() internally frees the skb on error what would result in a
double free. Therefore use __skb_put_padto() directly and instruct it
to not free the skb on error.

Fixes: b423e9ae49 ("r8169: fix offloaded tx checksum for small packets.")
Reported-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Heiner Kallweit <hkallweit1@gmail.com>
Link: https://lore.kernel.org/r/f7e68191-acff-9ded-4263-c016428a8762@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-11-18 19:20:33 +01:00

..

3com

…

8390

…

adaptec

…

aeroflex

…

agere

…

alacritech

…

allwinner

…

alteon

…

altera

…

amazon

…

amd

…

apm

…

apple

…

aquantia

…

arc

…

atheros

…

aurora

…

broadcom

bnxt_en: Log unknown link speed appropriately.

2020-11-05 11:43:20 +01:00

brocade

…

cadence

cadence: force nonlinear buffers to be cloned

2020-11-10 12:37:24 +01:00

calxeda

…

cavium

net: ethernet: cavium: octeon_mgmt: use phy_start and phy_stop

2020-10-14 10:33:03 +02:00

chelsio

cxgb4: set up filter action after rewrites

2020-11-01 12:01:03 +01:00

cirrus

…

cisco

net: enic: Cure the enic api locking trainwreck

2020-10-29 09:57:43 +01:00

cortina

…

davicom

…

dec

net: dec: de2104x: Increase receive ring size for Tulip

2020-10-07 08:01:26 +02:00

dlink

…

emulex

…

ezchip

…

faraday

net: ftgmac100: Fix Aspeed ast2600 TX hang issue

2020-10-29 09:57:26 +01:00

freescale

gianfar: Account for Tx PTP timestamp in the skb headroom

2020-11-10 12:37:25 +01:00

fujitsu

…

google

…

hisilicon

net: hns3: Clear the CMDQ registers before unmapping BAR region

2020-11-01 12:01:04 +01:00

hp

…

huawei

…

i825xx

…

ibm

powerpc/vnic: Extend "failover pending" window

2020-11-10 12:37:25 +01:00

intel

igc: Fix returning wrong statistics

2020-11-18 19:20:27 +01:00

marvell

…

mediatek

…

mellanox

net/mlx5: Fix deletion of duplicate rules

2020-11-18 19:20:26 +01:00

micrel

…

microchip

lan743x: fix "BUG: invalid wait context" when setting rx mode

2020-11-18 19:20:27 +01:00

moxa

…

mscc

…

myricom

…

natsemi

…

neterion

…

netronome

nfp: use correct define to return NONE fec

2020-09-26 18:03:13 +02:00

ni

…

nvidia

…

nxp

…

oki-semi

…

packetengines

…

pasemi

…

pensando

ionic: check port ptr before use

2020-11-10 12:37:25 +01:00

qlogic

net: qed: RDMA personality shouldn't fail VF load

2020-10-01 13:18:18 +02:00

qualcomm

…

rdc

…

realtek

r8169: fix potential skb double free in an error path

2020-11-18 19:20:33 +01:00

renesas

ravb: Fix bit fields checking in ravb_hwtstamp_get()

2020-11-01 12:01:04 +01:00

rocker

…

samsung

…

seeq

…

sfc

…

sgi

…

silan

…

sis

…

smsc

…

socionext

…

stmicro

net: stmmac: use netif_tx_start|stop_all_queues() function

2020-10-29 09:57:40 +01:00

sun

…

synopsys

…

tehuti

…

ti

…

toshiba

…

tundra

…

via

…

wiznet

…

xilinx

net: axienet: Propagate failure of DMA descriptor setup

2020-10-01 13:17:47 +02:00

xircom

…

xscale

…

dnet.c

…

dnet.h

…

ec_bhf.c

…

ethoc.c

…

fealnx.c

…

jme.c

…

jme.h

…

Kconfig

…

korina.c

net: korina: cast KSEG0 address to pointer in kfree

2020-10-29 09:58:10 +01:00

lantiq_etop.c

…

lantiq_xrx200.c

net: lantiq: Disable IRQs only if NAPI gets scheduled

2020-09-26 18:03:15 +02:00

Makefile

…