Tho Vu
cfef46d692
ravb: Fix use-after-free ravb_tstamp_skb ...
When a Tx timestamp is requested, a pointer to the skb is stored in the
ravb_tstamp_skb struct. This was done without an skb_get. There exists
the possibility that the skb could be freed by ravb_tx_free (when
ravb_tx_free is called from ravb_start_xmit) before the timestamp was
processed, leading to a use-after-free bug.
Use skb_get when filling a ravb_tstamp_skb struct, and add appropriate
frees/consumes when a ravb_tstamp_skb struct is freed.
Fixes: c156633f1353 ("Renesas Ethernet AVB driver proper")
Signed-off-by: Tho Vu <tho.vu.wh@rvc.renesas.com>
Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@renesas.com>
Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-08-18 14:19:14 -07:00
2019-08-03 07:02:01 -07:00
2019-07-12 12:24:03 -07:00
2019-07-24 11:02:28 +02:00
2019-07-31 08:51:17 -06:00
2019-08-02 17:30:36 -07:00
2019-07-09 12:34:26 -07:00
2019-07-28 10:26:10 -07:00
2019-07-31 08:51:56 -06:00
2019-08-14 15:50:46 +02:00
2019-07-19 17:13:56 -07:00
2019-08-05 00:55:00 +03:00
2019-07-22 15:04:54 -07:00
2019-07-10 11:05:26 +02:00
2019-07-21 13:31:14 -07:00
2019-07-11 15:36:02 -07:00
2019-07-23 09:49:10 +02:00
2019-07-18 09:49:30 +02:00
2019-07-19 12:23:37 -07:00
2019-07-19 10:42:02 -07:00
2019-07-17 09:55:43 -07:00
2019-07-19 10:42:02 -07:00
2019-06-27 10:24:47 -07:00
2019-07-25 20:09:37 -05:00
2019-07-26 09:43:43 -07:00
2019-07-24 11:29:41 +02:00
2019-07-29 00:57:39 +02:00
2019-08-02 18:53:51 -07:00
2019-08-06 11:47:23 -07:00
2019-07-18 17:08:07 -07:00
2019-07-21 19:18:45 -07:00
2019-06-29 21:08:14 -07:00
2019-07-12 14:42:05 -07:00
2019-08-01 22:24:16 +02:00
2019-07-09 09:04:31 -07:00
2019-07-09 12:34:26 -07:00
2019-07-12 12:24:03 -07:00
2019-08-01 12:53:53 -04:00
2019-07-20 12:22:30 -07:00
2019-07-29 11:34:12 -07:00
2019-07-11 15:38:21 -07:00
2019-08-01 20:21:00 +02:00
2019-07-31 08:54:06 -07:00
2019-07-09 08:59:39 -07:00
2019-07-31 21:44:45 +10:00
2019-07-14 16:36:51 -07:00
2019-07-30 18:59:24 -04:00
2019-07-22 09:01:47 -07:00
2019-07-20 09:34:55 -07:00
2019-07-11 18:11:21 -07:00
2019-07-11 15:14:01 -07:00
2019-07-15 20:18:40 -07:00
2019-08-01 14:05:17 +02:00
2019-07-22 15:31:00 +02:00
2019-08-04 16:37:08 -07:00
2019-08-18 14:19:14 -07:00
2019-08-05 10:25:48 -07:00
2019-07-21 09:46:59 -07:00
2019-07-27 08:25:51 -07:00
2019-07-23 17:47:02 +02:00
2019-07-12 12:24:03 -07:00
2019-07-17 11:26:09 -07:00
2019-07-15 20:44:49 -07:00
2019-07-04 22:01:59 -04:00
2019-07-09 12:34:26 -07:00
2019-07-21 09:46:59 -07:00
2019-07-09 12:34:26 -07:00
2019-07-29 11:43:48 +01:00
2019-07-01 15:04:59 +02:00
2019-07-13 15:02:27 -07:00
2019-07-29 18:24:59 +03:00
2019-07-15 11:03:02 -03:00
2019-07-15 21:06:15 -07:00
2019-07-22 11:23:00 +02:00
2019-07-16 19:23:24 -07:00
2019-07-09 08:57:45 -07:00
2019-07-17 08:58:04 -07:00
2019-08-01 14:07:46 +01:00
2019-07-17 11:44:41 -07:00
2019-07-19 17:13:56 -07:00
2019-07-17 10:03:50 -07:00
2019-08-13 19:26:47 -07:00
2019-08-02 14:46:33 -07:00
2019-07-22 13:51:20 -06:00
2019-07-05 08:15:08 +02:00
2019-08-05 11:49:02 -07:00
2019-07-16 12:21:41 -07:00
2019-07-22 17:04:20 -04:00
2019-07-23 09:36:07 +02:00
2019-07-12 12:24:03 -07:00
2019-07-28 10:18:33 -07:00
2019-07-25 11:26:42 +02:00
2019-07-17 11:23:13 -07:00
2019-07-26 07:49:29 -04:00
2019-07-16 09:25:04 -07:00
2019-07-19 10:42:02 -07:00
2019-07-15 11:03:02 -03:00
2019-07-15 08:49:11 +02:00
2019-08-02 15:26:48 -07:00
cfef46d692