bug report: frontier: use after free

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



drivers/staging/frontier/alphatrack.c +854 usb_alphatrack_disconnect()
   845          /* if the device is not opened, then we clean up right now */
   846          if (!dev->open_count) {
   847                  up(&dev->sem);
   848                  usb_alphatrack_delete(dev);

	We free "dev" here.

   849          } else {
   850                  dev->intf = NULL;
   851                  up(&dev->sem);
   852          }
   853  
   854          atomic_set(&dev->writes_pending, 0);

	We use it here.

regards,
dan carpenter
--
To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Kernel Development]     [Kernel Announce]     [Kernel Newbies]     [Linux Networking Development]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Device Mapper]

  Powered by Linux