On 11/6/19 02:54, Andy Shevchenko wrote: > On Wed, Nov 6, 2019 at 10:41 AM Pan Bian <bianpan2016@xxxxxxx> wrote: >> >> The next field of the DMA descriptor is written after releasing the >> descriptor, which may result in a use-after-free issue. Set the value of >> the field before it is released to fix the bug. >> > > Had you chance to read the discussion [1]? > I Cc to Gustavo to hear from him about destiny of the change. > Wow, thanks for reminding me about this thread, Andy. I had totally forgotten about this for more than two years... :| Here is the final version: https://lore.kernel.org/lkml/20191106202821.GA20347@embeddedor/ Thanks -- Gustavo