mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-04 20:19:47 +08:00
skb is already freed by dev_kfree_skb in pn533_fill_fragment_skbs, but follow error handler branch when pn533_fill_fragment_skbs() fails, skb is freed again, results in double free issue. Fix this by not free skb in error path of pn533_fill_fragment_skbs. Fixes: |
||
|---|---|---|
| .. | ||
| i2c.c | ||
| Kconfig | ||
| Makefile | ||
| pn533.c | ||
| pn533.h | ||
| uart.c | ||
| usb.c | ||