| commit | e603d9d824ff0eda98a65708a7e82112becf2dca | |
| author | Johannes Berg <johannes@sipsolutions.net> | |
| Mon, 13 Jul 2009 11:25:58 +0000 (13 13:25 +0200) | ||
| committer | John W. Linville <linville@tuxdriver.com> | |
| Tue, 21 Jul 2009 16:07:40 +0000 (21 12:07 -0400) | ||
| tree | ead78be30bfde8b11f6a5b60c3d2712b0136ebd4 | treesnapshot (tar.gz zip) |
| parent | 5d41635195c06fc3116ef3921fe85a9a3ea5ab20 | commitdiff |
mac80211_hwsim: fix use after free
Once the "data" pointer is freed, we can't be iterating
to the next item in the list any more so we need to use
list_for_each_entry_safe with a temporary variable.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Once the "data" pointer is freed, we can't be iterating
to the next item in the list any more so we need to use
list_for_each_entry_safe with a temporary variable.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| drivers/net/wireless/mac80211_hwsim.c | diffblobblamehistory |