Gitweb:     
http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=412e8a0ebf1a58c060cc76438e5b6d33789c5e20
Commit:     412e8a0ebf1a58c060cc76438e5b6d33789c5e20
Parent:     596f2d0554352f1089f7478b309b27d8cdf5cd4f
Author:     Eugene Teo <[EMAIL PROTECTED]>
AuthorDate: Mon May 21 22:30:22 2007 +0800
Committer:  John W. Linville <[EMAIL PROTECTED]>
CommitDate: Tue May 22 11:02:29 2007 -0400

    [PATCH] drivers/net/wireless/libertas/rx.c: fix use-after-free
    
    skb could have been freed by then. Also, in libertas_upload_rx_packet(),
    skb->protocol is initialized by eth_type_trans().
    
    Signed-off-by: Eugene Teo <[EMAIL PROTECTED]>
    Signed-off-by: John W. Linville <[EMAIL PROTECTED]>
---
 drivers/net/wireless/libertas/rx.c |    2 --
 1 files changed, 0 insertions(+), 2 deletions(-)

diff --git a/drivers/net/wireless/libertas/rx.c 
b/drivers/net/wireless/libertas/rx.c
index b19b5aa..96619a3 100644
--- a/drivers/net/wireless/libertas/rx.c
+++ b/drivers/net/wireless/libertas/rx.c
@@ -441,7 +441,5 @@ static int process_rxed_802_11_packet(wlan_private * priv, 
struct sk_buff *skb)
 done:
        LEAVE();
 
-       skb->protocol = __constant_htons(0x0019);       /* ETH_P_80211_RAW */
-
        return (ret);
 }
-
To unsubscribe from this list: send the line "unsubscribe git-commits-head" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to