Dan Carpenter 9566f6ee13 net: atm: fix use after free in lec_send() ...

[ Upstream commit f3009d0d6a ]

The ->send() operation frees skb so save the length before calling
->send() to avoid a use after free.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/c751531d-4af4-42fe-affe-6104b34b791d@stanley.mountain
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-03-28 21:59:53 +01:00

..

addr.c

…

addr.h

…

atm_misc.c

…

atm_sysfs.c

…

br2684.c

…

clip.c

…

common.c

…

common.h

…

ioctl.c

…

Kconfig

…

lec_arpc.h

…

lec.c

…

lec.h

…

Makefile

…

mpc.c

…

mpc.h

…

mpoa_caches.c

…

mpoa_caches.h

…

mpoa_proc.c

…

pppoatm.c

…

proc.c

…

protocols.h

…

pvc.c

…

raw.c

…

resources.c

…

resources.h

…

signaling.c

…

signaling.h

…

svc.c

…