git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5d41635) | patch
mac80211_hwsim: fix use after free
authorJohannes Berg <johannes@sipsolutions.net>
Mon, 13 Jul 2009 11:25:58 +0000 (13:25 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Tue, 21 Jul 2009 16:07:40 +0000 (12:07 -0400)
commite603d9d824ff0eda98a65708a7e82112becf2dca
treeead78be30bfde8b11f6a5b60c3d2712b0136ebd4tree | snapshot
parent5d41635195c06fc3116ef3921fe85a9a3ea5ab20commit | diff
mac80211_hwsim: fix use after free

Once the "data" pointer is freed, we can't be iterating
to the next item in the list any more so we need to use
list_for_each_entry_safe with a temporary variable.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/mac80211_hwsim.c diff | blob | history
Full containers within linux kernel