David S. Miller 628e300ccc
irda: Correctly clean up self->ias_obj on irda_bind() failure. ...
If irda_open_tsap() fails, the irda_bind() code tries to destroy
the ->ias_obj object by hand, but does so wrongly.
In particular, it fails to a) release the hashbin attached to the
object and b) reset the self->ias_obj pointer to NULL.
Fix both problems by using irias_delete_object() and explicitly
setting self->ias_obj to NULL, just as irda_release() does.
Reported-by: Tavis Ormandy <taviso@cmpxchg8b.com >
Signed-off-by: David S. Miller <davem@davemloft.net >
2010-08-30 18:37:56 -07:00
2010-08-02 14:28:36 -05:00
2010-04-11 14:53:53 -07:00
2010-08-19 00:26:46 -07:00
2010-04-11 14:53:53 -07:00
2010-08-04 21:53:17 -07:00
2010-08-26 15:18:27 -07:00
2010-08-10 07:59:11 -04:00
2010-08-23 20:14:36 -07:00
2010-08-26 16:11:08 -07:00
2010-08-11 16:12:35 -07:00
2010-08-17 17:37:28 -07:00
2010-03-30 22:02:32 +09:00
2010-07-18 15:07:14 -07:00
2010-06-10 23:31:35 -07:00
2010-08-11 23:03:50 -07:00
2010-06-11 18:37:08 -07:00
2010-07-14 18:27:09 -07:00
2010-05-23 23:11:07 -07:00
2010-08-27 19:31:56 -07:00
2010-08-23 14:41:22 -07:00
2010-03-30 22:02:32 +09:00
2010-08-30 18:37:56 -07:00
2010-06-03 03:21:52 -07:00
2010-05-17 23:23:13 -07:00
2010-08-26 13:29:38 -07:00
2010-03-30 22:02:32 +09:00
2010-05-12 00:05:35 -07:00
2010-08-04 15:28:37 -04:00
2010-08-04 15:31:02 -07:00
2010-05-17 23:23:14 -07:00
2010-08-18 23:35:58 -07:00
2010-04-20 16:37:13 -07:00
2010-06-02 05:53:56 -07:00
2010-07-20 18:25:24 -07:00
2010-08-18 23:40:03 -07:00
2010-04-11 14:53:53 -07:00
2010-08-01 00:32:12 -07:00
2010-08-04 21:53:16 -07:00
2010-08-17 15:12:15 -07:00
2010-08-04 15:31:02 -07:00
2010-07-21 15:33:01 +10:00
2010-05-12 23:02:29 -07:00
2010-07-20 13:28:05 -07:00
2010-07-12 20:21:47 -07:00
2010-05-20 21:04:44 -07:00
2010-08-09 15:18:57 -04:00
2010-05-17 17:39:28 -07:00
2010-08-14 22:38:09 -07:00
2010-06-03 20:03:40 -07:00
2010-07-26 13:13:49 -07:00
2010-06-29 15:32:43 -07:00
2010-07-18 19:15:26 -07:00
2010-05-17 23:23:14 -07:00
628e300ccc