projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 65bc0aa) | patch
staging: slicoss: fix multiple free-after-free in slic_entry_remove
authorDavid Matlack <dmatlack@google.com>
Tue, 6 May 2014 04:02:32 +0000 (21:02 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 23 May 2014 11:08:33 +0000 (20:08 +0900)
commita286e34de0568903e93d54beb1c62ce19f1b5031
tree79e710dc853bde8b4e36bb5898e7e877e091c10btree | snapshot
parent65bc0aaa9c2aa691e313a92250463008fb63266dcommit | diff
staging: slicoss: fix multiple free-after-free in slic_entry_remove

This patch fixes two free-after-free bugs in slic_entry_remove.
Specifically, slic_unmap_mmio_space() iounmaps adapter->slic_regs,
which is the same region of memory as dev->base_addr (iounmap-ed
a few lines later).

Next, both release_mem_region() and pci_release_regions() are called
on the same pci_dev struct.

Signed-off-by: David Matlack <dmatlack@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/slicoss/slicoss.c diff | blob | history
John Crispins staging tree