[<prev] [next>] [day] [month] [year] [list]
Message-Id: <200912151755.09515.strakh@ispras.ru>
Date: Tue, 15 Dec 2009 17:55:09 +0000
From: Alexander Strakh <strakh@...ras.ru>
To: linux-hams@...r.kernel.org, netdev@...r.kernel.org,
linux-hams@...r.kernel.org
Subject: BUG null dreference in driver drivers/net/hamradio/bpqether.c
KERNEL_VERSION: 2.6.32
SUBJECT: null derefernce in function bpq_xmit
SUBSCRIBE:
In driver drivers/net/hamradio/bpqether.c in function bpq_xmit:
1. if in line 288 after calling function bpq_get_ether_dev variable dev =
NULL, then we goto line 289
2. In line 289: null dereference of dev - "dev->stats.tx_dropped++"
288 if ((dev = bpq_get_ether_dev(dev)) == NULL) {
289 dev->stats.tx_dropped++;
290 kfree_skb(skb);
291 return NETDEV_TX_OK;
292 }
Found by Linux Device Drivers Verification Project (Svace Detector)
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists