Re: [PATCH 1/5] ath9k: Fix use-after-free Read in htc_connect_service
This patch is correct but there are a lot of error paths in hif_usb_send() which don't free the skb. Some error paths *do* free the skb but most don't. It's really a lot of work to sort through and fix.