linux/drivers/net
Alexey Khoroshilov 8a10da2646 rtl8187: fix use after free on failure path in rtl8187_init_urbs()
In case of __dev_alloc_skb() failure rtl8187_init_urbs()
calls usb_free_urb(entry) where 'entry' can points to urb
allocated at the previous iteration. That means refcnt will be
decremented incorrectly and the urb can be used after memory
deallocation.

The patch fixes the issue and implements error handling of init_urbs
in rtl8187_start().

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2013-09-09 14:42:00 -04:00
..
appletalk
arcnet
bonding bonding: drop read_lock in bond_compute_features 2013-09-04 00:27:25 -04:00
caif caif: add a sanity check to the tty name 2013-09-04 00:27:27 -04:00
can can: mscan: improve clock API use 2013-08-29 22:49:35 +02:00
cris
dsa
ethernet Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-09-07 14:27:46 -07:00
fddi drivers:net: Convert dma_alloc_coherent(...__GFP_ZERO) to dma_zalloc_coherent 2013-08-29 21:55:23 -04:00
hamradio
hippi
hyperv
ieee802154
irda Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2013-09-05 14:54:29 -07:00
phy net: mdio-octeon: use platform_{get,set}_drvdata() 2013-09-03 22:38:46 -04:00
plip
ppp
slip
team net: team: inherit addr_assign_type along with dev_addr 2013-09-03 20:57:49 -04:00
usb Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2013-09-05 14:54:29 -07:00
vmxnet3 VMXNET3: Add support for virtual IOMMU 2013-08-27 16:02:02 -04:00
wan
wimax
wireless rtl8187: fix use after free on failure path in rtl8187_init_urbs() 2013-09-09 14:42:00 -04:00
xen-netback xen-netback: rename functions 2013-08-29 01:18:04 -04:00
Kconfig
LICENSE.SRC
Makefile
Space.c
dummy.c
eql.c
ifb.c
loopback.c
macvlan.c net: macvlan: inherit addr_assign_type along with dev_addr 2013-09-03 20:57:49 -04:00
macvtap.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-08-26 16:37:08 -04:00
mdio.c
mii.c
netconsole.c netconsole: avoid a crash with multiple sysfs writers 2013-09-03 22:10:49 -04:00
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
sungem_phy.c
tun.c tuntap: orphan frags before trying to set tx timestamp 2013-09-05 12:44:31 -04:00
veth.c
virtio_net.c virtio-net: Set RXCSUM feature if GUEST_CSUM is available 2013-09-03 21:36:41 -04:00
vxlan.c vxlan: Fix kernel panic on device delete. 2013-09-05 14:31:02 -04:00
xen-netfront.c