| commit | 869c554808ccf7ddd25be5317073b88ceddb8507 | [log] [tgz] |
|---|---|---|
| author | Adrian Hunter <adrian.hunter@intel.com> | Thu Aug 25 14:11:43 2016 -0600 |
| committer | Jens Axboe <axboe@fb.com> | Thu Aug 25 14:11:43 2016 -0600 |
| tree | ed7f5a2112a7d00dbfa02415585bc7d1991fe824 | |
| parent | f2791e7eadf437633f30faa51b30878cf15650be [diff] |
mmc: fix use-after-free of struct request
We call mmc_req_is_special() after having processed a request, but
it could be freed after that. Check that ahead of time, and use
the cached value.
Reported-by: Hans de Goede <hdegoede@redhat.com>
Tested-by: Hans de Goede <hdegoede@redhat.com>
Fixes: c2df40dfb8c0 ("drivers: use req op accessor")
Signed-off-by: Jens Axboe <axboe@fb.com>