xen/evtchn: double free on error
Subsystems (2)
PATCH 1/1 xen/evtchn: double free on error
The call to del_evtchn() frees "evtchn".
Signed-off-by Dan Carpenter <[email protected]>
drivers/xen/evtchn.c +0 -1
@@ -319,7 +319,6 @@ err:if (HYPERVISOR_event_channel_op (EVTCHNOP_close, &close) !=0 )BUG ();del_evtchn (u, evtchn); -kfree (evtchn);return rc; }
Quoted 3 lines · Dan Carpenter
The call to
del_evtchn()frees "evtchn".Signed-off-by Dan Carpenter <[email protected]>
Good catch, thanks.
Reviewed-by David Vrabel <[email protected]>
This needs to be queued up for 3.12.
David
Quoted 3 lines · Dan Carpenter
The call to
del_evtchn()frees "evtchn".Signed-off-by Dan Carpenter <[email protected]>
Good catch, thanks.
Reviewed-by David Vrabel <[email protected]>
This needs to be queued up for 3.12.
David