OpenE2K
/
linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

greybus: sdio: fix tear-down use-after-free 

The mmc-driver private data must not be accessed after mmc_free_host()
has released it.

Signed-off-by: Johan Hovold <johan@hovoldconsulting.com>
Reviewed-by: Viresh Kumar <viresh.kumar@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
This commit is contained in:
Johan Hovold 2015-09-14 20:19:03 +02:00 committed by Greg Kroah-Hartman
parent d7849bffc6
commit e5265266ec
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/staging/greybus/sdio.c
View File

@ -750,8 +750,8 @@ static void gb_sdio_connection_exit(struct gb_connection *connection)
flush_workqueue(gb_sdio_mrq_workqueue);
destroy_workqueue(gb_sdio_mrq_workqueue);
mmc_remove_host(mmc);
mmc_free_host(mmc);
kfree(host->xfer_buffer);
mmc_free_host(mmc);
}
static struct gb_protocol sdio_protocol = {