search for: skb_pull_inline

Displaying 2 results from an estimated 2 matches for "skb_pull_inline".

2017 Nov 02
2
Possible unsafe usage of skb->cb in virtio-net
...chwork.ozlabs.org/patch/558324/ > > > > + skb_push(skb, skb->data - skb_data_orig); > > sq->skb[pi] = skb; > > > > MLX5E_TX_SKB_CB(skb)->num_wqebbs = DIV_ROUND_UP(ds_cnt, > > And in the middle of this we have: > > skb_pull_inline(skb, ihs); > > This is looks illegal. > > You must not modify the data pointers of any SKB that you receive for > sending via ->ndo_start_xmit() unless you know that absolutely you are > the one and only reference that exists to that SKB. > > And exactly for the case y...
2017 Nov 02
2
Possible unsafe usage of skb->cb in virtio-net
...chwork.ozlabs.org/patch/558324/ > > > > + skb_push(skb, skb->data - skb_data_orig); > > sq->skb[pi] = skb; > > > > MLX5E_TX_SKB_CB(skb)->num_wqebbs = DIV_ROUND_UP(ds_cnt, > > And in the middle of this we have: > > skb_pull_inline(skb, ihs); > > This is looks illegal. > > You must not modify the data pointers of any SKB that you receive for > sending via ->ndo_start_xmit() unless you know that absolutely you are > the one and only reference that exists to that SKB. > > And exactly for the case y...