Re: [EXT] [PATCH] atlantic: fix double-free in aq_ring_tx_clean

[Igor Russkikh]

> We found this bug while fuzzing the device driver. Using and freeing
> the dangling pointer buff->skb would cause use-after-free and
> double-free.
> 
> This bug is triggerable with compromised/malfunctioning devices. We
> found the bug with QEMU emulation and tested the patch by emulation.
> We did NOT test on a real device.
> 
> Attached is the bug report.
> 

Reviewed-by: Igor Russkikh <irusskikh@xxxxxxxxxxx>

Thank you for submitting this!

Igor