Yun Lu 6fb7b769d6 rtase: fix double free of multi-frag skb on DMA map failure ... In rtase_start_xmit(), when the head buffer DMA mapping fails after rtase_xmit_frags() has mapped all fragments, the error path clears the fragment descriptors with rtase_tx_clear_range(), which frees the skb through the last-frag slot and accounts tx_dropped. Control then falls through to the common error label, which frees the same skb a second time and counts it again. Return right after clearing the fragments when the skb owns frags; the no-frag case still drops through and frees the head skb once. Fixes: d6e882b89f ("rtase: Implement .ndo_start_xmit function") Signed-off-by: Yun Lu <luyun@kylinos.cn> Reviewed-by: Jacob Keller <jacob.e.keller@intel.com> Reviewed-by: Justin Lai <justinlai0215@realtek.com> Link: https://patch.msgid.link/20260721023836.6691-1-luyun_611@163.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2026-07-27 18:16:42 -07:00
..
Makefile	rtase: Add a Makefile in the rtase folder	2024-09-05 22:02:39 -07:00
rtase_main.c	rtase: fix double free of multi-frag skb on DMA map failure	2026-07-27 18:16:42 -07:00
rtase.h	rtase: Workaround for TX hang caused by hardware packet parsing	2026-07-21 11:30:20 -07:00