]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f3cb546) | patch
mmc: fix use-after-free of struct request
authorAdrian Hunter <adrian.hunter@intel.com>
Thu, 25 Aug 2016 20:11:43 +0000 (14:11 -0600)
committerJens Axboe <axboe@fb.com>
Thu, 25 Aug 2016 20:11:43 +0000 (14:11 -0600)
commit32a1cb7998ff8fc3709e55b214d1e00cd744e9ad
treeed7f5a2112a7d00dbfa02415585bc7d1991fe824tree | snapshot
parentf3cb546aa3fcc00019a8cb39ca61ab908bfe0b5ccommit | diff
mmc: fix use-after-free of struct request

We call mmc_req_is_special() after having processed a request, but
it could be freed after that. Check that ahead of time, and use
the cached value.

Reported-by: Hans de Goede <hdegoede@redhat.com>
Tested-by: Hans de Goede <hdegoede@redhat.com>
Fixes: 1b327298a6e5 ("drivers: use req op accessor")
Signed-off-by: Jens Axboe <axboe@fb.com>
drivers/mmc/card/block.c diff | blob | history
drivers/mmc/card/queue.c diff | blob | history
Linux Kernel Source Tree.