]> err.no Git - linux-2.6/commit
projects / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6d6936e) | patch
zd1211rw: fix potential use-after-free bug
authorJohannes Berg <johannes@sipsolutions.net>
Wed, 7 May 2008 23:43:59 +0000 (01:43 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Tue, 13 May 2008 01:22:19 +0000 (21:22 -0400)
commitdbabad0c9c026dea3ba803cbd9d768cdffc68e32
tree046b607c669724ab4bde3108eab4c79f467eb21dtree | snapshot
parent6d6936e2ea82ebcbdd12d489b7b5ccf430de52f1commit | diff
zd1211rw: fix potential use-after-free bug

zd_mac_tx_to_dev() could potentially free the skb, or hand it off
to mac80211 which might free it. Hence, this code needs to get the
usb pointer out of skb->cb before handing it off to that function.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/zd1211rw/zd_usb.c diff | blob | history
Linux 2.6 source tree