| commit | e6be18f6d62c1d3b331ae020b76a29c2ccf6b0bf | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Sat May 28 08:01:46 2016 +0300 |
| committer | Wolfram Sang <wsa@the-dreams.de> | Sat May 28 17:37:42 2016 +0200 |
| tree | 2ce62107bbfa2312926f4e1e49ef1300ad67b79d | |
| parent | ed2608faa0f701b1dbc65277a9e5c7ff7118bfd4 [diff] |
i2c: dev: use after free in detach
The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).
Fixes: d6760b14d4a1 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>