| commit | f93f3c4ee48727713c3349b659adf8048fd4524b | |
| author | Dan Carpenter <dan.carpenter@oracle.com> | |
| Wed, 31 Jul 2013 20:53:34 +0000 (31 13:53 -0700) | ||
| committer | Linus Torvalds <torvalds@linux-foundation.org> | |
| Wed, 31 Jul 2013 21:41:02 +0000 (31 14:41 -0700) | ||
| tree | 28f871e0aad6131c5c3d9297f3fa7fb202363018 | treesnapshot (tar.gz zip) |
| parent | 4e5052948110140f1628dd986e27912b0e6b2065 | commitdiff |
rapidio: fix use after free in rio_unregister_scan()
We're freeing the list iterator so we can't move to the next entry.
Since there is only one matching mport_id, we can just break after
finding it.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Ryan Mallon <rmallon@gmail.com>
Acked-by: Alexandre Bounine <alexandre.bounine@idt.com>
Cc: Matt Porter <mporter@kernel.crashing.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
We're freeing the list iterator so we can't move to the next entry.
Since there is only one matching mport_id, we can just break after
finding it.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Ryan Mallon <rmallon@gmail.com>
Acked-by: Alexandre Bounine <alexandre.bounine@idt.com>
Cc: Matt Porter <mporter@kernel.crashing.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
| drivers/rapidio/rio.c | diffblobblamehistory |