From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S129417AbRB0BxU>; Mon, 26 Feb 2001 20:53:20 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S129421AbRB0BxL>; Mon, 26 Feb 2001 20:53:11 -0500
Received: from 2-113.cwb-adsl.telepar.net.br ([200.193.161.113]:5615 "HELO
	brinquedo.distro.conectiva") by vger.kernel.org with SMTP
	id <S129417AbRB0BxI>; Mon, 26 Feb 2001 20:53:08 -0500
Date: Mon, 26 Feb 2001 21:14:03 -0300
From: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
To: Alan Cox <alan@lxorguk.ukuu.org.uk>, shingo@flab.fujitsu.co.jp,
        linux-kernel@vger.kernel.org
Subject: [PATCH] fmvj18x_cs: don't reference skb after passing it to netif_rx
Message-ID: <20010226211403.N8692@conectiva.com.br>
Mail-Followup-To: Arnaldo Carvalho de Melo <acme@conectiva.com.br>,
	Alan Cox <alan@lxorguk.ukuu.org.uk>, shingo@flab.fujitsu.co.jp,
	linux-kernel@vger.kernel.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.14i
X-Url: http://advogato.org/person/acme
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org

another pcmcia one

Em Mon, Feb 26, 2001 at 08:33:59PM -0300, Arnaldo Carvalho de Melo escreveu:
Hi,

	I've just read davem's post at netdev about the brokeness of
referencing skbs after passing it to netif_rx, so please consider applying
this patch. Ah, this was just added to the Janitor's TODO list at
http://bazar.conectiva.com.br/~acme/TODO and I'm doing a quick audit in the
net drivers searching for this, maybe some more patches will follow.

- Arnaldo

--- linux-2.4.2/drivers/net/pcmcia/fmvj18x_cs.c	Tue Feb 13 19:15:05 2001
+++ linux-2.4.2.acme/drivers/net/pcmcia/fmvj18x_cs.c	Mon Feb 26 22:45:53 2001
@@ -994,9 +994,9 @@
 	    }
 #endif
 
+	    lp->stats.rx_bytes += skb->len;
 	    netif_rx(skb);
 	    lp->stats.rx_packets++;
-	    lp->stats.rx_bytes += skb->len;
 	}
 	if (--boguscount <= 0)
 	    break;