]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1cf1f54) | patch
mmc: fix use-after-free of struct request
authorAdrian Hunter <adrian.hunter@intel.com>
Thu, 25 Aug 2016 20:11:43 +0000 (14:11 -0600)
committerJens Axboe <axboe@fb.com>
Thu, 25 Aug 2016 20:11:43 +0000 (14:11 -0600)
commit25c600b5c0e89812eee69f1642bd1609841509c4
treeed7f5a2112a7d00dbfa02415585bc7d1991fe824tree | snapshot
parent1cf1f5459844276c1a396440193d458ec7d329bccommit | diff
mmc: fix use-after-free of struct request

We call mmc_req_is_special() after having processed a request, but
it could be freed after that. Check that ahead of time, and use
the cached value.

Reported-by: Hans de Goede <hdegoede@redhat.com>
Tested-by: Hans de Goede <hdegoede@redhat.com>
Fixes: d449d5cf2e37 ("drivers: use req op accessor")
Signed-off-by: Jens Axboe <axboe@fb.com>
drivers/mmc/card/block.c diff | blob | history
drivers/mmc/card/queue.c diff | blob | history
Linux Kernel Source Tree.