The patch titled
drivers/net/wireless/libertas/rx.c: fix use-after-free
has been removed from the -mm tree. Its filename was
drivers-net-wireless-libertas-rxc-fix.patch
This patch was dropped because it was merged into mainline or a subsystem tree
------------------------------------------------------
Subject: drivers/net/wireless/libertas/rx.c: fix use-after-free
From: Eugene Teo <[EMAIL PROTECTED]>
skb could have been freed by then. Also, in libertas_upload_rx_packet(),
skb->protocol is initialized by eth_type_trans().
Cc: John W. Linville <[EMAIL PROTECTED]>
Signed-off-by: Eugene Teo <[EMAIL PROTECTED]>
Signed-off-by: Andrew Morton <[EMAIL PROTECTED]>
---
drivers/net/wireless/libertas/rx.c | 2 --
1 files changed, 2 deletions(-)
diff -puN
drivers/net/wireless/libertas/rx.c~drivers-net-wireless-libertas-rxc-fix
drivers/net/wireless/libertas/rx.c
--- a/drivers/net/wireless/libertas/rx.c~drivers-net-wireless-libertas-rxc-fix
+++ a/drivers/net/wireless/libertas/rx.c
@@ -453,7 +453,5 @@ static int process_rxed_802_11_packet(wl
done:
LEAVE();
- skb->protocol = __constant_htons(0x0019); /* ETH_P_80211_RAW */
-
return (ret);
}
_
Patches currently in -mm which might be from [EMAIL PROTECTED] are
-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
