brcmfmac: Make skb header writable before use
authorJames Hughes <james.hughes@raspberrypi.org>
Tue, 25 Apr 2017 09:15:06 +0000 (10:15 +0100)
committerKalle Valo <kvalo@codeaurora.org>
Wed, 26 Apr 2017 09:05:18 +0000 (12:05 +0300)
The driver was making changes to the skb_header without
ensuring it was writable (i.e. uncloned).
This patch also removes some boiler plate header size
checking/adjustment code as that is also handled by the
skb_cow_header function used to make header writable.

Signed-off-by: James Hughes <james.hughes@raspberrypi.org>
Acked-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c

index 753db686649f5fb17fd608d6f8213328b92a8bf4..a3d82368f1a9f9722e62920e44ef52f7ee8602ef 100644 (file)
@@ -210,22 +210,13 @@ static netdev_tx_t brcmf_netdev_start_xmit(struct sk_buff *skb,
                goto done;
        }
 
-       /* Make sure there's enough room for any header */
-       if (skb_headroom(skb) < drvr->hdrlen) {
-               struct sk_buff *skb2;
-
-               brcmf_dbg(INFO, "%s: insufficient headroom\n",
+       /* Make sure there's enough writable headroom*/
+       ret = skb_cow_head(skb, drvr->hdrlen);
+       if (ret < 0) {
+               brcmf_err("%s: skb_cow_head failed\n",
                          brcmf_ifname(ifp));
-               drvr->bus_if->tx_realloc++;
-               skb2 = skb_realloc_headroom(skb, drvr->hdrlen);
                dev_kfree_skb(skb);
-               skb = skb2;
-               if (skb == NULL) {
-                       brcmf_err("%s: skb_realloc_headroom failed\n",
-                                 brcmf_ifname(ifp));
-                       ret = -ENOMEM;
-                       goto done;
-               }
+               goto done;
        }
 
        /* validate length for ether packet */