TencentOS-kernel/drivers/net/wireless/broadcom
Raveendran Somu 3517b2b572 brcmfmac: Fix double freeing in the fmac usb data path
[ Upstream commit 78179869dc3f5c0059bbf5d931a2717f1ad97ecd ]

When the brcmf_fws_process_skb() fails to get hanger slot for
queuing the skb, it tries to free the skb.
But the caller brcmf_netdev_start_xmit() of that funciton frees
the packet on error return value.
This causes the double freeing and which caused the kernel crash.

Signed-off-by: Raveendran Somu <raveendran.somu@cypress.com>
Signed-off-by: Chi-hsien Lin <chi-hsien.lin@cypress.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/1585124429-97371-3-git-send-email-chi-hsien.lin@cypress.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-03-16 16:37:07 +08:00
..
b43 b43: Fix connection problem with WPA3 2021-03-16 16:29:45 +08:00
b43legacy b43_legacy: Fix connection problem with WPA3 2021-03-16 16:29:45 +08:00
brcm80211 brcmfmac: Fix double freeing in the fmac usb data path 2021-03-16 16:37:07 +08:00
Kconfig Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
Makefile Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00