diff options
| author | Felix Fietkau <nbd@nbd.name> | 2020-01-13 21:21:07 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2020-01-15 11:53:35 +0300 |
| commit | 81c044fc3bdc5b7be967cd3682528ea94b58c06a (patch) | |
| tree | f09acc26054ddbfb3e7410769fc5ea2544adb60a /net/batman-adv/icmp_socket.c | |
| parent | 24953de0a5e31dcca7e82c8a3c79abc2dfe8fb6e (diff) | |
| download | linux-81c044fc3bdc5b7be967cd3682528ea94b58c06a.tar.xz | |
cfg80211: fix page refcount issue in A-MSDU decap
The fragments attached to a skb can be part of a compound page. In that case,
page_ref_inc will increment the refcount for the wrong page. Fix this by
using get_page instead, which calls page_ref_inc on the compound head and
also checks for overflow.
Fixes: 2b67f944f88c ("cfg80211: reuse existing page fragments in A-MSDU rx")
Cc: stable@vger.kernel.org
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Link: https://lore.kernel.org/r/20200113182107.20461-1-nbd@nbd.name
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/batman-adv/icmp_socket.c')
0 files changed, 0 insertions, 0 deletions