git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d620a7c) | patch
[SCSI] dpt_i2o: several use after free issues
authorDan Carpenter <error27@gmail.com>
Mon, 15 Mar 2010 08:26:56 +0000 (11:26 +0300)
committerJames Bottomley <James.Bottomley@suse.de>
Thu, 8 Apr 2010 22:26:15 +0000 (18:26 -0400)
commit229bab6bacc42295f13c0434772381a88ce2308b
tree739c27a013a8f1661a324dfe84f752d08be4c386tree | snapshot
parentd620a7cf05d4f12f5bbb1060d766e8139ab31458commit | diff
[SCSI] dpt_i2o: several use after free issues

adpt_i2o_delete_hba() calls kfree() so we have to save "pHba->next"
before calling it.  Also inside adpt_i2o_delete_hba() itself, there
was another use after free bug which I fixed by moving the kfree()
down a line.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>
drivers/scsi/dpt_i2o.c diff | blob | history
Full containers within linux kernel