3b557be89f
The error path in t7xx_dpmaif_rx_buf_alloc(), free and unmap the already
allocated and mapped skb in a loop, but the loop condition terminates when
the index reaches zero, which fails to free the first allocated skb at
index zero.
Check with i-- so that skb at index 0 is freed as well.
Cc: stable@vger.kernel.org
Fixes:
|
||
---|---|---|
.. | ||
Makefile | ||
t7xx_cldma.c | ||
t7xx_cldma.h | ||
t7xx_dpmaif.c | ||
t7xx_dpmaif.h | ||
t7xx_hif_cldma.c | ||
t7xx_hif_cldma.h | ||
t7xx_hif_dpmaif_rx.c | ||
t7xx_hif_dpmaif_rx.h | ||
t7xx_hif_dpmaif_tx.c | ||
t7xx_hif_dpmaif_tx.h | ||
t7xx_hif_dpmaif.c | ||
t7xx_hif_dpmaif.h | ||
t7xx_mhccif.c | ||
t7xx_mhccif.h | ||
t7xx_modem_ops.c | ||
t7xx_modem_ops.h | ||
t7xx_netdev.c | ||
t7xx_netdev.h | ||
t7xx_pci.c | ||
t7xx_pci.h | ||
t7xx_pcie_mac.c | ||
t7xx_pcie_mac.h | ||
t7xx_port_ctrl_msg.c | ||
t7xx_port_proxy.c | ||
t7xx_port_proxy.h | ||
t7xx_port_trace.c | ||
t7xx_port_wwan.c | ||
t7xx_port.h | ||
t7xx_reg.h | ||
t7xx_state_monitor.c | ||
t7xx_state_monitor.h |