Dan Carpenter <dan.carpenter@xxxxxxxxxx> wrote: > The brcmu_pkt_buf_free_skb() function frees "pkt" so it leads to a > static checker warning: > > drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c:1974 brcmf_sdio_readframes() > error: dereferencing freed memory 'pkt' > > It looks like there was supposed to be a continue after we free "pkt". > > Fixes: 4754fceeb9a6 ("brcmfmac: streamline SDIO read frame routine") > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> > Acked-by: Franky Lin <franky.lin@xxxxxxxxxxxx> Patch applied to wireless-drivers-next.git, thanks. 216b44000ada brcmfmac: Fix use after free in brcmf_sdio_readframes() -- https://patchwork.kernel.org/patch/11270885/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches