From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from smtp.codeaurora.org ([198.145.29.96]:45125 "EHLO smtp.codeaurora.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752098AbcJCHY0 (ORCPT ); Mon, 3 Oct 2016 03:24:26 -0400 From: Kalle Valo To: Jes.Sorensen@redhat.com Cc: linux-wireless@vger.kernel.org, Larry.Finger@lwfinger.net, stable@vger.kernel.org Subject: Re: [PATCH 1/2] rtl8xxxu: Fix memory leak in handling rxdesc16 packets References: <1475178055-16924-1-git-send-email-Jes.Sorensen@redhat.com> <1475178055-16924-2-git-send-email-Jes.Sorensen@redhat.com> Date: Mon, 03 Oct 2016 10:24:20 +0300 In-Reply-To: <1475178055-16924-2-git-send-email-Jes.Sorensen@redhat.com> (Jes Sorensen's message of "Thu, 29 Sep 2016 15:40:54 -0400") Message-ID: <871szxuc7v.fsf@kamboji.qca.qualcomm.com> (sfid-20161003_092429_739162_5EFAE17A) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: linux-wireless-owner@vger.kernel.org List-ID: Jes.Sorensen@redhat.com writes: > From: Jes Sorensen > > A device running without RX package aggregation could return more data > in the USB packet than the actual network packet. In this case the > could would clone the skb but then determine that that there was no > packet to handle and exit without freeing the cloned skb first. > > This has so far only been observed with 8188eu devices, but could > affect others. > > Signed-off-by: Jes Sorensen Before I commit I'll add: Cc: stable@vger.kernel.org # 4.8+ -- Kalle Valo