From 42c549dea6418c97dc21a6d057317bb6bd11365b Mon Sep 17 00:00:00 2001 From: linyunsheng Date: Fri, 26 Jul 2019 19:10:08 +0800 Subject: [PATCH] net: hns3: fix for use after free problem driver inclusion category: bugfix bugzilla: NA CVE: NA Feature or Bugfix:Bugfix Signed-off-by: Yunsheng Lin Reviewed-by: lipeng Reviewed-by: Yang Yingliang Reviewed-by: Weiwei Deng Signed-off-by: Yang Yingliang --- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/drivers/net/ethernet/hisilicon/hns3/hns3_enet.c b/drivers/net/ethernet/hisilicon/hns3/hns3_enet.c index 592bbcc1d129..c9f7291bfa41 100644 --- a/drivers/net/ethernet/hisilicon/hns3/hns3_enet.c +++ b/drivers/net/ethernet/hisilicon/hns3/hns3_enet.c @@ -1298,10 +1298,10 @@ static int hns3_nic_maybe_stop_tx(struct hns3_enet_ring *ring, dev_kfree_skb_any(skb); *out_skb = new_skb; - bd_num = hns3_nic_bd_num(skb); - if ((skb_is_gso(skb) && bd_num > HNS3_MAX_BD_NUM_TSO) || - (!skb_is_gso(skb) && bd_num > HNS3_MAX_BD_NUM_NORMAL)) { - trace_hns3_over_8bd(skb); + bd_num = hns3_nic_bd_num(new_skb); + if ((skb_is_gso(new_skb) && bd_num > HNS3_MAX_BD_NUM_TSO) || + (!skb_is_gso(new_skb) && bd_num > HNS3_MAX_BD_NUM_NORMAL)) { + trace_hns3_over_8bd(new_skb); return -ENOMEM; } -- GitLab