linux-stable/drivers/s390/net
Julian Wiedmann 78335ed001 s390/qeth: fix use-after-free in error path
[ Upstream commit afa0c5904b ]

The error path in qeth_alloc_qdio_buffers() that takes care of
cleaning up the Output Queues is buggy. It first frees the queue, but
then calls qeth_clear_outq_buffers() with that very queue struct.

Make the call to qeth_clear_outq_buffers() part of the free action
(in the correct order), and while at it fix the naming of the helper.

Fixes: 0da9581ddb ("qeth: exploit asynchronous delivery of storage blocks")
Signed-off-by: Julian Wiedmann <jwi@linux.ibm.com>
Reviewed-by: Alexandra Winter <wintera@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-03-13 14:05:01 -07:00
..
ctcm_dbug.c
ctcm_dbug.h
ctcm_fsms.c
ctcm_fsms.h
ctcm_main.c
ctcm_main.h
ctcm_mpc.c
ctcm_mpc.h
ctcm_sysfs.c
fsm.c
fsm.h
Kconfig
lcs.c
lcs.h
Makefile
netiucv.c
qeth_core.h s390/qeth: fix SETIP command handling 2018-03-11 16:21:33 +01:00
qeth_core_main.c s390/qeth: fix use-after-free in error path 2019-03-13 14:05:01 -07:00
qeth_core_mpc.c
qeth_core_mpc.h
qeth_core_sys.c s390/qeth: reset layer2 attribute on layer switch 2018-09-26 08:36:34 +02:00
qeth_l2.h s390/qeth: unbreak OSM and OSN support 2017-06-07 12:07:42 +02:00
qeth_l2_main.c s390/qeth: don't dump past end of unknown HW header 2018-10-10 08:53:22 +02:00
qeth_l2_sys.c s390/qeth: unbreak OSM and OSN support 2017-06-07 12:07:42 +02:00
qeth_l3.h s390/qeth: fix IP address lookup for L3 devices 2018-03-11 16:21:33 +01:00
qeth_l3_main.c s390/qeth: fix HiperSockets sniffer 2018-11-27 16:09:39 +01:00
qeth_l3_sys.c s390/qeth: update takeover IPs after configuration change 2018-01-02 20:35:15 +01:00
smsgiucv.c
smsgiucv.h
smsgiucv_app.c