tree 2ce62107bbfa2312926f4e1e49ef1300ad67b79d
parent ed2608faa0f701b1dbc65277a9e5c7ff7118bfd4
author Dan Carpenter <dan.carpenter@oracle.com> 1464411706 +0300
committer Wolfram Sang <wsa@the-dreams.de> 1464449862 +0200

i2c: dev: use after free in detach

The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).

Fixes: d6760b14d4a1 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>