Messages in this thread | | | Date | Tue, 5 Nov 2019 17:58:51 +0300 | From | Dan Carpenter <> | Subject | Re: [PATCH] staging: rtl8192e: fix potential use after free |
| |
On Tue, Nov 05, 2019 at 10:49:11PM +0800, Pan Bian wrote: > The variable skb is released via kfree_skb() when the return value of > _rtl92e_tx is not zero. However, after that, skb is accessed again to > read its length, which may result in a use after free bug. This patch > fixes the bug by moving the release operation to where skb is never > used later. > > Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
regards, dan carpenter
| |