| commit | ae9e63bb2c0cf5437d9d13d822b27149336c6e0e | |
| author | Haiyang Zhang <haiyangz@microsoft.com> | |
| Fri, 3 Aug 2012 09:32:18 +0000 (3 09:32 +0000) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Fri, 3 Aug 2012 23:51:11 +0000 (3 16:51 -0700) | ||
| tree | 208ca440bec48067d84fbd86f04fa79bb55d00c3 | treesnapshot (tar.gz zip) |
| parent | 2207b60ffb6545040e2e2620fced13deba7643c2 | commitdiff |
hyperv: Move wait completion msg code into rndis_filter_halt_device()
We need to wait for send_completion msg before put_rndis_request() at
the end of rndis_filter_halt_device(). Otherwise, netvsc_send_completion()
may reference freed memory which is overwritten, and cause panic.
Reported-by: Long Li <longli@microsoft.com>
Reported-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
We need to wait for send_completion msg before put_rndis_request() at
the end of rndis_filter_halt_device(). Otherwise, netvsc_send_completion()
may reference freed memory which is overwritten, and cause panic.
Reported-by: Long Li <longli@microsoft.com>
Reported-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| drivers/net/hyperv/netvsc.c | diffblobblamehistory | |
| drivers/net/hyperv/rndis_filter.c | diffblobblamehistory |