Messages in this thread Patch in this message |  | | From | Pengcheng Li <> | Subject | [PATCH] misc: st_core: Fix skb double free corruption | Date | Sat, 28 Apr 2018 14:07:49 +0800 |
| |
When some failures happened in hci_recv_frame() function, skb is freed by both hci_recv_frame and st_send_frame
Signed-off-by: Li Pengcheng <lipengcheng8@huawei.com> Signed-off-by: Yao Baofeng <yaobaofeng@huawei.com> Signed-off-by: Li Jiangxiong <lijiangxiong@hisilicon.com> --- drivers/misc/ti-st/st_core.c | 1 - 1 file changed, 1 deletion(-)
diff --git a/drivers/misc/ti-st/st_core.c b/drivers/misc/ti-st/st_core.c index 0005159..f4ce211 100644 --- a/drivers/misc/ti-st/st_core.c +++ b/drivers/misc/ti-st/st_core.c @@ -124,7 +124,6 @@ static void st_send_frame(unsigned char chnl_id, struct st_data_s *st_gdata) (st_gdata->list[chnl_id]->priv_data, st_gdata->rx_skb) != 0)) { pr_err(" proto stack %d's ->recv failed", chnl_id); - kfree_skb(st_gdata->rx_skb); return; } } else { -- 2.8.0
|  |