projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0fe8846) | patch
mailbox: tegra-hsp: Use after free in tegra_hsp_remove_doorbells()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 18 Nov 2016 11:34:10 +0000 (14:34 +0300)
committerThierry Reding <treding@nvidia.com>
Fri, 18 Nov 2016 13:32:13 +0000 (14:32 +0100)
commit68050eb6c611527232fe5574c7306e97e47499ef
tree268a1aa8b6f5250b1c637c3f049ed29baa3e6a0dtree | snapshot (tar.gz zip)
parent0fe88461a0ec95a71950b4841f139a62ed63dc81commit | diff
mailbox: tegra-hsp: Use after free in tegra_hsp_remove_doorbells()

We have to use the _safe version of list_for_each() because we're
freeing the pointer as we go along.  (This might not show up testing
depending on what config options you have enabled).

Fixes: 0fe88461a0ec ("mailbox: Add Tegra HSP driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Thierry Reding <treding@nvidia.com>
drivers/mailbox/tegra-hsp.c diff | blob | blame | history