linux/drivers/net/e1000
David S. Miller 9e927fb618 [PATCH] Wrong return value corrupts free object in e1000 driver
For some reason, E1000's ->hard_start_xmit() routine returns -EFAULT
instead of one of the NETDEV_TX_* error codes.  In fact, it frees up
the SKB before returning this.  This makes the queueing layer think
the packet should be requeued and subsequently we corrupt a freed
object.

Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Jeff Garzik <jeff@garzik.org>
2006-03-11 13:25:17 -05:00
..
LICENSE Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
e1000.h [PATCH] e1000: revert to single descriptor for legacy receive path 2006-02-28 20:24:07 -08:00
e1000_ethtool.c [PATCH] e1000: Fix whitespace 2006-01-18 16:17:58 -05:00
e1000_hw.c [PATCH] e1000: Fix whitespace 2006-01-18 16:17:58 -05:00
e1000_hw.h [PATCH] e1000: Fix whitespace 2006-01-18 16:17:58 -05:00
e1000_main.c [PATCH] Wrong return value corrupts free object in e1000 driver 2006-03-11 13:25:17 -05:00
e1000_osdep.h [PATCH] e1000: Fix whitespace 2006-01-18 16:17:58 -05:00
e1000_param.c [PATCH] e1000: Fix whitespace 2006-01-18 16:17:58 -05:00