diff options
author | 2017-01-02 11:19:29 +0100 | |
---|---|---|
committer | 2017-01-02 11:28:25 +0100 | |
commit | 35f432a03e41d3bf08c51ede917f94e2288fbe8c (patch) | |
tree | 67eed715e449fb7460f834c32edf723f2b4efa05 /tools/perf/scripts/python/export-to-postgresql.py | |
parent | Merge branch 'l2tp-socket-lookup-fixes' (diff) | |
download | linux-dev-35f432a03e41d3bf08c51ede917f94e2288fbe8c.tar.xz linux-dev-35f432a03e41d3bf08c51ede917f94e2288fbe8c.zip |
mac80211: initialize fast-xmit 'info' later
In ieee80211_xmit_fast(), 'info' is initialized to point to the skb
that's passed in, but that skb may later be replaced by a clone (if
it was shared), leading to an invalid pointer.
This can lead to use-after-free and also later crashes since the
real SKB's info->hw_queue doesn't get initialized properly.
Fix this by assigning info only later, when it's needed, after the
skb replacement (may have) happened.
Cc: stable@vger.kernel.org
Reported-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions