[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20160106.150818.1539288359464258183.davem@davemloft.net>
Date: Wed, 06 Jan 2016 15:08:18 -0500 (EST)
From: David Miller <davem@...emloft.net>
To: gnomes@...rguk.ukuu.org.uk
Cc: netdev@...r.kernel.org, davem@...r.kernel.org
Subject: Re: [PATCH] mkiss: fix scribble on freed memory
From: Alan <gnomes@...rguk.ukuu.org.uk>
Date: Wed, 06 Jan 2016 14:55:02 +0000
> commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
> scribble on free memory but added a new one which allows the user to
> scribble even more and user controlled data into freed space.
>
> As with 6pack we need to halt the queue before we free the buffers, because
> the transmit logic is not protected by the semaphore.
>
> Signed-off-by: Alan Cox <alan@...ux.intel.com>
Applied and queued up for -stable, thanks Alan.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists