| commit | 1a3cac6c6d1f56dc26939eb41be29844f897c15a | [log] [tgz] |
|---|---|---|
| author | Eric Van Hensbergen <ericvh@ericvh-desktop.austin.ibm.com> | Thu Jul 26 14:04:54 2007 -0500 |
| committer | Eric Van Hensbergen <ericvh@ericvh-laptop.austin.ibm.com> | Thu Aug 23 10:12:48 2007 -0500 |
| tree | 02922961c01db29922737f37796265103e96dc6b | |
| parent | 8eb891fc809b2300137bcd247025628c06c95a63 [diff] |
9p: fix use after free
On 7/22/07, Adrian Bunk <bunk@stusta.de> wrote:
The Coverity checker spotted the following use-after-free
in net/9p/mux.c:
<-- snip -->
...
struct p9_conn *p9_conn_create(struct p9_transport *trans, int msize,
unsigned char *extended)
{
...
if (!m->tagpool) {
kfree(m);
return ERR_PTR(PTR_ERR(m->tagpool));
}
...
<-- snip -->
Also spotted was a leak of the same structure further down in the function.
Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>