]> git.baikalelectronics.ru Git - kernel.git/commit
Staging: unisys: use after free in list_for_each()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 10 Apr 2014 09:45:45 +0000 (12:45 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 16 Apr 2014 18:41:45 +0000 (11:41 -0700)
commite4f62bb3242029977f5abb3e1374e52c0b45442b
treea8db6f2bccbb5de07024d11eb83ffcb8c0c48be4
parentcc05840ff6b1d56a2466d2b96ed282ae3826b789
Staging: unisys: use after free in list_for_each()

These should be using the _safe version of list_for_each() because we
free the current element and it leads to a use after free bug.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/unisys/visorchipset/visorchipset.h
drivers/staging/unisys/visorchipset/visorchipset_main.c