diff options
| author | David S. Miller <davem@davemloft.net> | 2010-05-26 21:17:29 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-05-26 21:17:29 -0700 |
| commit | 9616ff434d96303689391af3d6e1c845d233405f (patch) | |
| tree | fe467102ce2a59dc2113e8f4da6a4d8185404fda /init | |
| parent | 7c1f6afcf98fe95fb3f2b70ce01cf66f6db53b5e (diff) | |
| download | linux-9616ff434d96303689391af3d6e1c845d233405f.tar.gz linux-9616ff434d96303689391af3d6e1c845d233405f.tar.bz2 linux-9616ff434d96303689391af3d6e1c845d233405f.zip | |
sunsu: Fix use after free in su_remove().
Real serial port 'up' objects are statically allocated from an
array in the driver. Keyboard and mouse ports, on the other
hand, are dynamically allocated.
Unfortunately, we free these dynamic 'up' objects before we unmap the
I/O registers.
Rearrange su_remove() so that this does not happen.
Noticed by Julia Lawall.
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions