git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bc6772a) | patch
tmio_mmc: Fix use after free in remove()
authorMagnus Damm <damm@opensource.se>
Wed, 11 Mar 2009 12:59:03 +0000 (21:59 +0900)
committerPierre Ossman <drzeus@drzeus.cx>
Tue, 24 Mar 2009 20:30:03 +0000 (21:30 +0100)
commitbedcc45c2e5d72b1c4b087b725c391441a93eee6
tree366a7472ebe65f9bba02d3599282022ca120ac72tree | snapshot
parentbc6772a023ceab8df404b18b31c27f764dcf5b3fcommit | diff
tmio_mmc: Fix use after free in remove()

Update the tmio_mmc code to call mmc_free_host() when
done using the private data. Without this fix the driver
frees memory and then keeps on using it as private data.

Signed-off-by: Magnus Damm <damm@opensource.se>
Acked-by: Ian Molton <ian@mnementh.co.uk>
Signed-off-by: Pierre Ossman <drzeus@drzeus.cx>
drivers/mmc/host/tmio_mmc.c diff | blob | history
Full containers within linux kernel