* [Patch] Possible dereference in drivers/net/wireless/zd1201.c
@ 2006-10-01 20:27 Eric Sesterhenn
0 siblings, 0 replies; only message in thread
From: Eric Sesterhenn @ 2006-10-01 20:27 UTC (permalink / raw)
To: linux-kernel; +Cc: pe1rxq
hi,
if we enter the if(!zd) and set free to 1,
we dereference zd in the exit code.
Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
--- linux-2.6.18-git16/drivers/net/wireless/zd1201.c.orig 2006-10-01 22:21:59.000000000 +0200
+++ linux-2.6.18-git16/drivers/net/wireless/zd1201.c 2006-10-01 22:22:59.000000000 +0200
@@ -193,10 +193,8 @@ static void zd1201_usbrx(struct urb *urb
struct sk_buff *skb;
unsigned char type;
- if (!zd) {
- free = 1;
- goto exit;
- }
+ if (!zd)
+ return;
switch(urb->status) {
case -EILSEQ:
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2006-10-01 20:27 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-10-01 20:27 [Patch] Possible dereference in drivers/net/wireless/zd1201.c Eric Sesterhenn
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®