mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
synced 2026-10-14 05:55:17 +00:00
skb is already freed by dev_kfree_skb in pn533_fill_fragment_skbs, but follow error handler branch when pn533_fill_fragment_skbs() fails, skb is freed again, results in double free issue. Fix this by not free skb in error path of pn533_fill_fragment_skbs. Fixes: |
History
|
|
|---|---|---|
| .. | ||
| i2c.c | ||
| Kconfig | ||
| Makefile | ||
| pn533.c | ||
| pn533.h | ||
| uart.c | ||
| usb.c | ||