ath11k: avoid use_after_free in ath11k_dp_rx_msdu_coalesce API
authorKarthikeyan Periyasamy <periyasa@codeaurora.org>
Wed, 27 Nov 2019 14:08:53 +0000 (14:08 +0000)
committerKalle Valo <kvalo@codeaurora.org>
Fri, 29 Nov 2019 07:47:37 +0000 (09:47 +0200)
commit30679ec409189de89f55552a623c264091d72b66
treeb4092f102ecdc6703006fd18cdf173f976619674
parentf425078b449f90793c73423e4bbc44da6aad48d6
ath11k: avoid use_after_free in ath11k_dp_rx_msdu_coalesce API

Accessing already stored first msdu data after the skb expand trigger
use_after_free, since first msdu got deleted. so do the descriptor copy
operation before the skb expand operation.

Signed-off-by: Karthikeyan Periyasamy <periyasa@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/ath/ath11k/dp_rx.c