| commit | 7599b39d52b21cd13dcc53e395b459f826fb4728 | |
| author | David S. Miller <davem@davemloft.net> | |
| Thu, 10 Feb 2011 05:48:36 +0000 (9 21:48 -0800) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Wed, 2 Mar 2011 14:47:07 +0000 (2 09:47 -0500) | ||
| tree | 640513697af29776e9050eaecef69d10e5145abd | treesnapshot (tar.gz zip) |
| parent | cbc0238c26e7a18eff2892ab9a24fa8eed5dc333 | commitdiff |
x25: Do not reference freed memory.
commit 96642d42f076101ba98866363d908cab706d156c upstream.
In x25_link_free(), we destroy 'nb' before dereferencing
'nb->dev'. Don't do this, because 'nb' might be freed
by then.
Reported-by: Randy Dunlap <randy.dunlap@oracle.com>
Tested-by: Randy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit 96642d42f076101ba98866363d908cab706d156c upstream.
In x25_link_free(), we destroy 'nb' before dereferencing
'nb->dev'. Don't do this, because 'nb' might be freed
by then.
Reported-by: Randy Dunlap <randy.dunlap@oracle.com>
Tested-by: Randy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| net/x25/x25_link.c | diffblobblamehistory |