| commit | e577516b9db3e0f19df82b6430fe3b06e05d6304 | [log] [tgz] |
|---|---|---|
| author | Ido Schimmel <idosch@mellanox.com> | Thu Aug 06 16:41:58 2015 +0200 |
| committer | David S. Miller <davem@davemloft.net> | Sun Aug 09 22:54:10 2015 -0700 |
| tree | 4c9eac68dca177a0335932c9b8191ffde55b7941 | |
| parent | 3bfcd34764cbd3bcb48f6e9009eacf1d19856213 [diff] |
mlxsw: Fix use-after-free bug in mlxsw_sx_port_xmit Store the length of the skb before transmitting it and use it for stats instead of skb->len, since skb might have been freed already. This issue was discovered using the Kernel Address sanitizer (KASan). Signed-off-by: Ido Schimmel <idosch@mellanox.com> Signed-off-by: Jiri Pirko <jiri@mellanox.com> Signed-off-by: David S. Miller <davem@davemloft.net>