diff options
| author | Faisal Latif | 2008-02-21 15:27:32 +0100 |
|---|---|---|
| committer | Roland Dreier | 2008-02-27 01:24:29 +0100 |
| commit | a2e9c384ce76993cd68d6de57eaa81985b4618e3 (patch) | |
| tree | adea958874e4289b400635633b4f6829270de8eb /drivers/infiniband/hw/nes/nes_cm.c | |
| parent | RDMA/nes: Fix use-after-free in nes_create_cq() (diff) | |
| download | kernel-qcow2-linux-a2e9c384ce76993cd68d6de57eaa81985b4618e3.tar.gz kernel-qcow2-linux-a2e9c384ce76993cd68d6de57eaa81985b4618e3.tar.xz kernel-qcow2-linux-a2e9c384ce76993cd68d6de57eaa81985b4618e3.zip | |
RDMA/nes: Fix use-after-free in mini_cm_dec_refcnt_listen()
Fix use-after-free spotted by Coverity checker flagged by Adrian Bunk.
Signed-off-by: Faisal Latif <flatif@neteffect.com>
Signed-off-by: Glenn Streiff <gstreiff@neteffect.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/infiniband/hw/nes/nes_cm.c')
| -rw-r--r-- | drivers/infiniband/hw/nes/nes_cm.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/infiniband/hw/nes/nes_cm.c b/drivers/infiniband/hw/nes/nes_cm.c index 78e845c94576..6c298aa9ab05 100644 --- a/drivers/infiniband/hw/nes/nes_cm.c +++ b/drivers/infiniband/hw/nes/nes_cm.c @@ -947,6 +947,7 @@ static int mini_cm_dec_refcnt_listen(struct nes_cm_core *cm_core, nes_debug(NES_DBG_CM, "destroying listener (%p)\n", listener); kfree(listener); + listener = NULL; ret = 0; cm_listens_destroyed++; } else { |