[Bug 254479] Kernel remote heap overflow in Realtek RTL8188SU/RTL8191SU/RTL8192SU Wifi Cards USB driver

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254479

Mark Johnston <markj at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |markj at FreeBSD.org
             Status|Open                        |Closed
         Resolution|---                         |Not A Bug

--- Comment #5 from Mark Johnston <markj at FreeBSD.org> ---
Whether the lock is held doesn't really matter.  At this point the driver owns
the mbuf.  The lock only protects driver state, so if, say, it updates a
descriptor to point to the mbuf buffer, we'd want to ensure that the pointer is
cleared before the mbuf is freed or handed off to other layers.  But the actual
m_freem() call does not require any synchronization.

-- 
You are receiving this mail because:
You are the assignee for the bug.