| commit | 538c7aac35f4282d7674c473f099b323b1e020dd | |
| author | Dan Carpenter <error27@gmail.com> | |
| Tue, 7 Apr 2009 03:56:46 +0000 (6 23:56 -0400) | ||
| committer | Chris Wright <chrisw@sous-sol.org> | |
| Mon, 27 Apr 2009 17:36:52 +0000 (27 10:36 -0700) | ||
| tree | b3c802bf5035419055e7a5fcc7c6232a1b6c66ab | treesnapshot (tar.gz zip) |
| parent | d930ec7bcd0c4ef7ce0e555fbd540c5ebcedc8bd | commitdiff |
dock: fix dereference after kfree()
upstream commit: f240729832dff3785104d950dad2d3ced4387f6d
dock_remove() calls kfree() on dock_station so we should use
list_for_each_entry_safe() to avoid dereferencing freed memory.
Found by smatch (http://repo.or.cz/w/smatch.git/). Compile tested.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Len Brown <len.brown@intel.com>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
upstream commit: f240729832dff3785104d950dad2d3ced4387f6d
dock_remove() calls kfree() on dock_station so we should use
list_for_each_entry_safe() to avoid dereferencing freed memory.
Found by smatch (http://repo.or.cz/w/smatch.git/). Compile tested.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Len Brown <len.brown@intel.com>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
| drivers/acpi/dock.c | diffblobblamehistory |