Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9a2e0fb0 authored by Matt Carlson's avatar Matt Carlson Committed by David S. Miller
Browse files

tg3: Fix tg3_skb_error_unmap() 



This function attempts to free one fragment beyond the number of
fragments that were actually mapped.  This patch brings back the limit
to the correct spot.

Signed-off-by: default avatarMatt Carlson <mcarlson@broadcom.com>
Tested-by: default avatarAlex Williamson <alex.williamson@redhat.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ec764bf0

drivers/net/tg3.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -5774,7 +5774,7 @@ static void tg3_skb_error_unmap(struct tg3_napi *tnapi, 
			 dma_unmap_addr(txb, mapping),

			 dma_unmap_addr(txb, mapping),

			 skb_headlen(skb),

			 skb_headlen(skb),

			 PCI_DMA_TODEVICE);

			 PCI_DMA_TODEVICE);

	for (i = 0; i <= last; i++) {

	for (i = 0; i < last; i++) {

		skb_frag_t *frag = &skb_shinfo(skb)->frags[i];

		skb_frag_t *frag = &skb_shinfo(skb)->frags[i];





		entry = NEXT_TX(entry);

		entry = NEXT_TX(entry);