提交 42c549de 编写于 作者: L linyunsheng 提交者: Xie XiuQi

net: hns3: fix for use after free problem

driver inclusion
category: bugfix
bugzilla: NA
CVE: NA

Feature or Bugfix:Bugfix
Signed-off-by: NYunsheng Lin <linyunsheng@huawei.com>
Reviewed-by: Nlipeng <lipeng321@huawei.com>
Reviewed-by: NYang Yingliang <yangyingliang@huawei.com>
Reviewed-by: NWeiwei Deng <dengweiwei@huawei.com>
Signed-off-by: NYang Yingliang <yangyingliang@huawei.com>
上级 f977280d
......@@ -1298,10 +1298,10 @@ static int hns3_nic_maybe_stop_tx(struct hns3_enet_ring *ring,
dev_kfree_skb_any(skb);
*out_skb = new_skb;
bd_num = hns3_nic_bd_num(skb);
if ((skb_is_gso(skb) && bd_num > HNS3_MAX_BD_NUM_TSO) ||
(!skb_is_gso(skb) && bd_num > HNS3_MAX_BD_NUM_NORMAL)) {
trace_hns3_over_8bd(skb);
bd_num = hns3_nic_bd_num(new_skb);
if ((skb_is_gso(new_skb) && bd_num > HNS3_MAX_BD_NUM_TSO) ||
(!skb_is_gso(new_skb) && bd_num > HNS3_MAX_BD_NUM_NORMAL)) {
trace_hns3_over_8bd(new_skb);
return -ENOMEM;
}
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册