* [PATCH 2.6 6/8] infiniband/hw/nes/nes_cm.c: Fix use-after-free
@ 2008-02-21 14:27 gstreiff
0 siblings, 0 replies; only message in thread
From: gstreiff @ 2008-02-21 14:27 UTC (permalink / raw)
To: rdreier; +Cc: bunk, flatif, general, linux-kernel
From: Faisal Latif <flatif@neteffect.com>
Use-after-free spotted by Coverity checker. Flagged by Adrian Bunk.
Signed-off-by: Faisal Latif <flatif@neteffect.com>
Signed-off-by: Glenn Streiff <gstreiff@neteffect.com>
---
drivers/infiniband/hw/nes/nes_cm.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/drivers/infiniband/hw/nes/nes_cm.c b/drivers/infiniband/hw/nes/nes_cm.c
index 78e845c..6c298aa 100644
--- a/drivers/infiniband/hw/nes/nes_cm.c
+++ b/drivers/infiniband/hw/nes/nes_cm.c
@@ -947,6 +947,7 @@ static int mini_cm_dec_refcnt_listen(struct nes_cm_core *cm_core,
nes_debug(NES_DBG_CM, "destroying listener (%p)\n", listener);
kfree(listener);
+ listener = NULL;
ret = 0;
cm_listens_destroyed++;
} else {
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2008-02-21 13:33 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-02-21 14:27 [PATCH 2.6 6/8] infiniband/hw/nes/nes_cm.c: Fix use-after-free gstreiff
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome