David S. Miller 9e927fb618 [PATCH] Wrong return value corrupts free object in e1000 driver
For some reason, E1000's ->hard_start_xmit() routine returns -EFAULT
instead of one of the NETDEV_TX_* error codes.  In fact, it frees up
the SKB before returning this.  This makes the queueing layer think
the packet should be requeued and subsequently we corrupt a freed
object.

Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Jeff Garzik <jeff@garzik.org>
2006-03-11 13:25:17 -05:00
..
2006-02-13 15:53:41 -08:00
2006-02-19 22:28:25 -08:00
2006-01-10 00:08:17 +01:00
2006-02-17 16:16:21 -05:00
2006-03-09 23:09:43 +01:00
2006-02-07 20:56:41 -05:00
2006-02-03 08:32:02 -08:00
2006-02-27 23:15:06 +01:00
2006-01-26 22:10:39 -05:00
2006-01-18 14:05:16 -08:00
2006-02-07 01:50:45 -05:00
2006-02-07 02:04:33 -05:00
2006-02-07 02:04:33 -05:00
2006-01-10 00:10:13 +01:00
2006-01-12 09:09:04 -08:00
2006-02-17 16:15:46 -05:00
2006-02-01 08:53:10 -08:00
2006-01-10 08:01:59 -08:00
2006-02-23 23:06:48 +01:00
2006-03-04 12:06:51 -05:00
2006-02-25 17:01:09 -05:00
2006-02-23 23:07:08 +01:00
2006-02-23 23:07:08 +01:00
2006-03-09 23:19:03 +01:00
2006-02-28 18:06:25 -05:00
2006-01-10 08:01:59 -08:00
2006-01-12 09:09:04 -08:00
2006-01-31 17:12:55 -08:00
2006-03-06 19:28:35 -08:00
2006-02-02 17:29:28 -08:00