diff options
| author | Alan <gnomes@lxorguk.ukuu.org.uk> | 2016-01-06 15:55:02 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-01-06 21:06:27 +0100 |
| commit | fde55c45d2175bd3e33aa28ee31e4ea6efa354e1 (patch) | |
| tree | 6f6c4b0883f9eeda92c08641a9254c42f1f1c49b /Documentation/pti | |
| parent | net: possible use after free in dst_release (diff) | |
| download | linux-fde55c45d2175bd3e33aa28ee31e4ea6efa354e1.tar.xz linux-fde55c45d2175bd3e33aa28ee31e4ea6efa354e1.zip | |
mkiss: fix scribble on freed memory
commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
scribble on free memory but added a new one which allows the user to
scribble even more and user controlled data into freed space.
As with 6pack we need to halt the queue before we free the buffers, because
the transmit logic is not protected by the semaphore.
Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation/pti')
0 files changed, 0 insertions, 0 deletions