David B. Robins f6194bcf03 net: usb: asix: Fix crash on skb alloc failure ...

If asix_rx_fixup_internal() fails to allocate rx->ax_skb, it will return
but not clear rx->size. rx points to driver private data. A later call
assumes that nonzero size means ax_skb was allocated and passes a null
ax_skb to skb_put. Changed allocation failure return to clear size first.

Found testing board with AX88772B devices.

Signed-off-by: David B. Robins <linux@davidrobins.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2015-10-05 03:31:27 -07:00

15 KiB

Raw Blame History

View Raw