Re: [PATCH -next] netdevice zd1201: Use after free
From: David Miller <hidden>
Date: 2008-12-19 03:37:03
Also in:
linux-wireless
Possibly related (same subject, not in this thread)
- 2008-12-18 · Re: [PATCH -next] netdevice zd1201: Use after free · John W. Linville <hidden>
- 2008-12-18 · [PATCH -next] netdevice zd1201: Use after free · Wang Chen <hidden>
From: Wang Chen <redacted> Date: Thu, 18 Dec 2008 14:53:31 +0800
| commit 3d29b0c33d431ecc69ec778f8c236d382f59a85f | Author: John W. Linville [off-list ref] | Date: Fri Oct 31 14:13:12 2008 -0400 | | netdevice zd1201: Convert directly reference of netdev->priv to netdev_priv()
...
This commit changed the allocation of netdev, but didn't change the free method of it. This causes "zd" be used after the memory, which is pointed by "zd", being freed by free_netdev(). Signed-off-by: Wang Chen <redacted>
Patch applied to net-next-2.6, thanks! -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org More majordomo info at http://vger.kernel.org/majordomo-info.html