Tho Vu cfef46d692 ravb: Fix use-after-free ravb_tstamp_skb ... When a Tx timestamp is requested, a pointer to the skb is stored in the ravb_tstamp_skb struct. This was done without an skb_get. There exists the possibility that the skb could be freed by ravb_tx_free (when ravb_tx_free is called from ravb_start_xmit) before the timestamp was processed, leading to a use-after-free bug. Use skb_get when filling a ravb_tstamp_skb struct, and add appropriate frees/consumes when a ravb_tstamp_skb struct is freed. Fixes: c156633f13 ("Renesas Ethernet AVB driver proper") Signed-off-by: Tho Vu <tho.vu.wh@rvc.renesas.com> Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@renesas.com> Signed-off-by: Simon Horman <horms+renesas@verge.net.au> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-08-18 14:19:14 -07:00
..
appletalk
arcnet	arcnet: com20020-isa: Mark expected switch fall-throughs	2019-07-29 10:23:59 -07:00
bonding	bonding: Add vlan tx offload to hw_enc_features	2019-08-08 22:01:44 -07:00
caif	caif-hsi: fix possible deadlock in cfhsi_exit_module()	2019-07-17 11:58:56 -07:00
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-08-06 17:11:59 -07:00
dsa	net: dsa: sja1105: remove set but not used variables 'tx_vid' and 'rx_vid'	2019-08-08 22:29:02 -07:00
ethernet	ravb: Fix use-after-free ravb_tstamp_skb	2019-08-18 14:19:14 -07:00
fddi	The main MIPS changes for a pretty light v5.3 cycle, including:	2019-07-17 09:42:03 -07:00
fjes	fjes: no need to check return value of debugfs_create functions	2019-06-22 16:43:08 -07:00
hamradio	net: hamradio: baycom_epp: Mark expected switch fall-through	2019-07-29 13:57:58 -07:00
hippi	hippi: Remove call to memset after pci_alloc_consistent	2019-07-15 11:06:27 -07:00
hyperv	hv_netvsc: Fix a warning of suspicious RCU usage	2019-08-09 13:42:19 -07:00
ieee802154	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372	2019-06-05 17:37:10 +02:00
ipvlan	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 09:29:14 -07:00
netdevsim	netdevsim: Restore per-network namespace accounting for fib entries	2019-08-11 20:59:19 -07:00
phy	net: phy: consider AN_RESTART status when reading link status	2019-08-13 19:49:01 -07:00
plip	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 11:00:14 -07:00
ppp	compat_ioctl: pppoe: fix PPPOEIOCSFWD handling	2019-07-30 14:42:13 -07:00
slip
team	team: Add vlan tx offload to hw_enc_features	2019-08-08 22:41:41 -07:00
usb	net: kalmia: fix memory leaks	2019-08-18 13:03:21 -07:00
vmxnet3	vmxnet3: Remove call to memset after dma_alloc_coherent	2019-07-15 11:06:27 -07:00
wan	net: wan: sdla: Mark expected switch fall-through	2019-07-29 13:57:58 -07:00
wimax	wimax/i2400m: fix a memory leak bug	2019-08-18 14:11:28 -07:00
wireless	wireless-drivers fixes for 5.3	2019-08-06 11:48:48 -07:00
xen-netback	xen/netback: Reset nr_frags before freeing skb	2019-08-08 18:01:24 -07:00
dummy.c
eql.c
geneve.c	SPDX update for 5.2-rc6	2019-06-21 09:58:42 -07:00
gtp.c	gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()	2019-07-07 18:42:48 -07:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c	loopback: fix lockdep splat	2019-07-03 11:24:38 -07:00
macsec.c	macsec: fix checksumming after decryption	2019-07-02 14:12:29 -07:00
macvlan.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 11:00:14 -07:00
macvtap.c
Makefile
mdio.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c	coallocate socket_wq with socket itself	2019-07-08 19:25:19 -07:00
thunderbolt.c
tun.c	tun: mark small packets as owned by the tap sock	2019-07-25 11:38:32 -07:00
veth.c	veth: Support bulk XDP_TX	2019-06-25 14:26:54 +02:00
virtio_net.c	virtio_net: enable napi_tx by default	2019-06-14 19:34:27 -07:00
vrf.c	vrf: make sure skb->data contains ip header to make routing	2019-07-21 13:32:51 -07:00
vsockmon.c
vxlan.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-07-08 19:48:57 -07:00
xen-netfront.c