Julia Lawall
c4a3987fa0
drivers/serial/sunsu.c: Correct use after free
...
The of_iounmap is at the out_unmap label, but at that point up has already
been freed. The free cannot be moved to the out_unmap label, because that
label is reachable from cases where up should not be freed. So the call to
of_iounmap is just duplicated, and the goto converted to a return.
A simplified version of the semantic match that finds this problem is as
follows: (http://coccinelle.lip6.fr/ )
// <smpl>
@@
expression x,e;
identifier f;
iterator I;
statement S;
@@
*kfree(x);
... when != &x
when != x = e
when != I(x,...) S
*x->f
// </smpl>
Signed-off-by: Julia Lawall <julia@diku.dk >
Signed-off-by: David S. Miller <davem@davemloft.net >
2010-03-29 22:33:28 -07:00
..
2009-09-24 17:01:22 +10:00
2009-12-11 15:18:03 -08:00
2008-05-01 08:04:00 -07:00
2009-05-29 08:40:02 -07:00
2009-11-12 07:25:57 -08:00
2010-01-20 15:03:27 -08:00
2010-02-27 12:52:57 +01:00
2009-09-19 13:13:19 -07:00
2010-01-11 15:39:21 +00:00
2008-10-16 16:52:02 +02:00
2008-07-20 17:12:36 -07:00
2009-09-19 13:13:31 -07:00
2010-02-18 17:29:42 +00:00
2009-11-13 13:25:06 -08:00
2009-11-04 08:44:54 -08:00
2009-10-29 07:39:30 -07:00
2009-11-30 16:38:32 -08:00
2009-09-19 13:13:28 -07:00
2009-09-19 13:13:28 -07:00
2008-04-30 08:29:30 -07:00
2009-09-19 13:13:28 -07:00
2009-08-31 18:38:16 +02:00
2009-04-07 08:44:05 -07:00
2009-09-19 13:13:28 -07:00
2009-10-01 16:11:15 -07:00
2010-01-20 15:03:30 -08:00
2009-12-15 08:53:27 -08:00
2009-12-15 08:53:27 -08:00
2009-09-19 13:13:31 -07:00
2010-02-27 18:31:02 +01:00
2008-04-30 08:29:47 -07:00
2009-09-19 13:13:28 -07:00
2009-11-04 08:44:54 -08:00
2009-09-23 07:39:43 -07:00
2009-12-04 11:45:30 +10:00
2010-02-16 22:30:03 -07:00
2009-09-19 13:13:28 -07:00
2009-09-19 13:13:31 -07:00
2009-06-22 11:32:25 -07:00
2009-09-19 13:13:28 -07:00
2009-09-19 13:13:28 -07:00
2009-09-19 13:13:28 -07:00
2009-11-30 16:38:44 -08:00
2010-02-27 18:31:02 +01:00
2010-02-27 18:31:02 +01:00
2009-09-19 13:13:31 -07:00
2009-12-15 08:53:25 -08:00
2009-12-01 01:33:51 +00:00
2009-07-30 23:56:41 +01:00
2009-12-01 01:33:51 +00:00
2009-12-01 01:33:51 +00:00
2009-12-01 01:33:51 +00:00
2009-07-30 23:56:41 +01:00
2009-09-28 18:06:16 +01:00
2009-12-01 01:33:51 +00:00
2009-12-01 01:33:51 +00:00
2009-09-19 13:13:31 -07:00
2009-09-19 13:13:28 -07:00
2010-01-20 15:03:29 -08:00
2010-02-27 16:18:30 -08:00
2009-09-19 13:13:31 -07:00
2009-09-19 13:13:31 -07:00
2009-10-01 16:11:15 -07:00
2010-01-15 08:33:20 +09:00
2010-02-08 11:47:44 +09:00
2009-09-19 13:13:28 -07:00
2009-11-24 14:09:56 -08:00
2009-11-24 14:09:56 -08:00
2009-11-24 14:09:56 -08:00
2010-03-16 00:33:37 -07:00
2010-03-29 22:33:28 -07:00
2009-11-24 14:09:56 -08:00
2009-09-19 13:13:31 -07:00
2009-06-11 08:51:06 -07:00
2010-02-02 18:11:22 -08:00
2009-12-11 11:24:52 -08:00
2009-09-19 13:13:31 -07:00
2009-09-19 13:13:31 -07:00