android/android_kernel_samsung_sm8650
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

can: cc770: Fix use after free in cc770_tx_interrupt()

Browse Source 
This fixes use after free introduced by the last cc770 patch.

Signed-off-by: Andri Yngvason <andri.yngvason@marel.com>
Fixes: 746201235b3f ("can: cc770: Fix queue stall & dropped RTR reply")
Cc: linux-stable <stable@vger.kernel.org>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
This commit is contained in:
Andri Yngvason
2018-03-15 18:23:17 +00:00
committed by Marc Kleine-Budde
parent a069215cf5
commit 9ffd750394
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
drivers/net/can/cc770/cc770.c
View File

@ -706,13 +706,12 @@ static void cc770_tx_interrupt(struct net_device *dev, unsigned int o)
return; return;
} }
can_put_echo_skb(priv->tx_skb, dev, 0);
can_get_echo_skb(dev, 0);
cf = (struct can_frame *)priv->tx_skb->data; cf = (struct can_frame *)priv->tx_skb->data;
stats->tx_bytes += cf->can_dlc; stats->tx_bytes += cf->can_dlc;
stats->tx_packets++; stats->tx_packets++;
can_put_echo_skb(priv->tx_skb, dev, 0);
can_get_echo_skb(dev, 0);
priv->tx_skb = NULL; priv->tx_skb = NULL;
netif_wake_queue(dev); netif_wake_queue(dev);