| commit | 0d05568ac79bfc595f1eadc3e0fd7a20a45f7b69 | [log] [tgz] |
|---|---|---|
| author | wwang <wei_wang@realsil.com.cn> | Tue Mar 27 16:43:11 2012 +0800 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Tue Apr 10 09:18:16 2012 -0700 |
| tree | d15134080908344c9518d936b98a31f511aa4892 | |
| parent | 4ca5218e3939685c2325fc0a0a1ac8150272c93f [diff] |
staging:rts_pstor:Fix possible panic by NULL pointer dereference rtsx_transport.c (rtsx_transfer_sglist_adma_partial): pointer struct scatterlist *sg, which is mapped in dma_map_sg, is used as an iterator in later transfer operation. It is corrupted and passed to dma_unmap_sg, thus causing fatal unmap of some erroneous address. Fix it by duplicating *sg_ptr for iterating. Signed-off-by: wwang <wei_wang@realsil.com.cn> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>