On Tue, 08 Apr 2025 10:23:27 +0530, Sarika Sharma wrote:
> In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean
> is_continuation is part of rxcb.
> Currently, after freeing the skb, the rxcb->is_continuation accessed
> again which is wrong since the memory is already freed.
> This might lead use-after-free error.
>
> Hence, fix by locally defining bool is_continuation from rxcb,
> so that after freeing skb, is_continuation can be used.
>
> [...]
Applied, thanks!
[1/1] wifi: ath12k: fix invalid access to memory
commit: 9f17747fbda6fca934854463873c4abf8061491d
Best regards,
--
Jeff Johnson <jeff.johnson@xxxxxxxxxxxxxxxx>
