GitHub-Mirror/Star64_linux
2
0
Fork 0
mirror of https://github.com/Fishwaldo/Star64_linux.git synced 2025-06-30 10:49:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

dcb: use after free in dcb_flushapp()

Browse source 
The original code has a use after free bug because it's not using the
_safe() version of the list_for_each_entry() macro.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Dan Carpenter 2011-01-04 21:03:44 +00:00 • committed by David S. Miller
parent 70bfa2d2e1
commit 2a8fe00374
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
net/dcb/dcbnl.c
View file

@ -1643,9 +1643,10 @@ EXPORT_SYMBOL(dcb_setapp);
static void dcb_flushapp(void) static void dcb_flushapp(void)
{ {
struct dcb_app_type *app; struct dcb_app_type *app;
struct dcb_app_type *tmp;
spin_lock(&dcb_lock); spin_lock(&dcb_lock);
list_for_each_entry(app, &dcb_app_list, list) { list_for_each_entry_safe(app, tmp, &dcb_app_list, list) {
list_del(&app->list); list_del(&app->list);
kfree(app); kfree(app);
} }