diff options
| author | Julian Wiedmann <jwi@linux.ibm.com> | 2019-02-04 17:40:07 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2019-02-04 18:43:48 +0100 |
| commit | afa0c5904ba16d59b0454f7ee4c807dae350f432 (patch) | |
| tree | acf775612be44490db75c62b6a229e6279a93774 /drivers/irqchip | |
| parent | s390/qeth: release cmd buffer in error paths (diff) | |
| download | linux-afa0c5904ba16d59b0454f7ee4c807dae350f432.tar.xz linux-afa0c5904ba16d59b0454f7ee4c807dae350f432.zip | |
s390/qeth: fix use-after-free in error path
The error path in qeth_alloc_qdio_buffers() that takes care of
cleaning up the Output Queues is buggy. It first frees the queue, but
then calls qeth_clear_outq_buffers() with that very queue struct.
Make the call to qeth_clear_outq_buffers() part of the free action
(in the correct order), and while at it fix the naming of the helper.
Fixes: 0da9581ddb0f ("qeth: exploit asynchronous delivery of storage blocks")
Signed-off-by: Julian Wiedmann <jwi@linux.ibm.com>
Reviewed-by: Alexandra Winter <wintera@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/irqchip')
0 files changed, 0 insertions, 0 deletions