Messages in this thread | | | From | YE Chengfeng <> | Subject | nfc: pn533: suspected double free when pn533_fill_fragment_skbs() return value <= 0 | Date | Fri, 5 Nov 2021 09:22:12 +0000 |
| |
Hi,
We notice that skb is already freed by dev_kfree_skb in pn533_fill_fragment_skbs, but follow error handler branch #line 2288 and #line 2356, skb is freed again, seems like a double free issue. Would you like to have a look at them? We will provide patch for them after confirmation.
https://github.com/torvalds/linux/blob/master/drivers/nfc/pn533/pn533.c#L2288
Thanks so much, Chengfeng
| |