On Wed. 20 janv. 2021 at 21:53, Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> wrote: > On 1/20/21 12:41 PM, Vincent Mailhol wrote: > > After calling netif_rx_ni(skb), dereferencing skb is unsafe. > > Especially, the can_frame cf which aliases skb memory is accessed > > after the netif_rx_ni() in: > > stats->rx_bytes += cf->len; > > > > Reordering the lines solves the issue. > > > > Fixes: 39549eef3587 ("can: CAN Network device driver and Netlink interface") > > Signed-off-by: Vincent Mailhol <mailhol.vincent@xxxxxxxxxx> > > --- > > *Remark for upstream* > > drivers/net/can/dev.c has been moved to drivers/net/can/dev/dev.c in > > below commit, please carry the patch forward. > > Reference: 3e77f70e7345 ("can: dev: move driver related infrastructure > > into separate subdir") > > I've send a pull request to Jakub and David. Let's see what happens :) Thanks! Yours sincerely, Vincent > Marc > > -- > Pengutronix e.K. | Marc Kleine-Budde | > Embedded Linux | https://www.pengutronix.de | > Vertretung West/Dortmund | Phone: +49-231-2826-924 | > Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 | >