| commit | 2daa48729dfafd349c2a52520734de2edb9dc805 | [log] [tgz] |
|---|---|---|
| author | Eric Sesterhenn <snakebyte@gmx.de> | Wed Oct 04 09:56:44 2006 -0700 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Tue Oct 17 14:46:30 2006 -0700 |
| tree | 9355ed48b1da6d74b8877866fb49cfb57ec579f5 | |
| parent | 2920349d438ec08d2b1f6761c8b78b8d13fd1dee [diff] [blame] |
USB: fix use after free in wacom_sys.c the following commit added a use after free http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3D3bea733ab21247290bd552dd6a2cd3049af9adef Found by coverity (cid #1441) Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de> Signed-off-by: "Ping Cheng" <pingc@wacom.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
diff --git a/drivers/usb/input/wacom_sys.c b/drivers/usb/input/wacom_sys.c index 31379b8..3498b89 100644 --- a/drivers/usb/input/wacom_sys.c +++ b/drivers/usb/input/wacom_sys.c
@@ -282,8 +282,8 @@ input_unregister_device(wacom->dev); usb_free_urb(wacom->irq); usb_buffer_free(interface_to_usbdev(intf), 10, wacom->wacom_wac->data, wacom->data_dma); - kfree(wacom); kfree(wacom->wacom_wac); + kfree(wacom); } }