On 2017/4/28 1:38, Florian Fainelli wrote:
On 04/26/2017 07:44 PM, Yankejian wrote:
struct hns_nic_priv *priv = netdev_priv(ndev);
struct hnae_ring *ring = ring_data->ring;
@@ -361,6 +361,10 @@ int hns_nic_net_xmit_hw(struct net_device *ndev,
dev_queue = netdev_get_tx_q
On 04/26/2017 07:44 PM, Yankejian wrote:
> struct hns_nic_priv *priv = netdev_priv(ndev);
> struct hnae_ring *ring = ring_data->ring;
> @@ -361,6 +361,10 @@ int hns_nic_net_xmit_hw(struct net_device *ndev,
> dev_queue = netdev_get_tx_queue(ndev, skb->queue_mapping);
> netdev
From: lipeng
There is KASAN warning which turn out it's a skb used after free:
BUG: KASAN: use-after-free in hns_nic_net_xmit_hw+0x62c/0x940...
[17659.112635] alloc_debug_processing+0x18c/0x1a0
[17659.117208] __slab_alloc+0x52c/0x560
[17659.120909] kmem_cache_alloc
