Skip to contentSkip to conversation

xen/evtchn: double free on error

PATCH In review Dan Carpenter 2 participants 3 messages Aug 26, 2013 – Aug 27, 2013

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

PATCH 1/1 xen/evtchn: double free on error

The call to del_evtchn() frees "evtchn".

drivers/xen/evtchn.c +0 -1
index f328f12..8b3a69a 100644
@@ -319,7 +319,6 @@ err:
 	if (HYPERVISOR_event_channel_op(EVTCHNOP_close, &close) != 0)
 		BUG();
 	del_evtchn(u, evtchn);
-	kfree(evtchn);
 	return rc;
 }