Преглед на файлове

net/mlx4_en: dereferencing freed memory

We dereferenced "mclist" after the kfree().

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Dan Carpenter преди 13 години
родител
ревизия
9c64508af2
променени са 1 файла, в които са добавени 1 реда и са изтрити 3 реда
  1. 1 3
      drivers/net/ethernet/mellanox/mlx4/en_netdev.c

+ 1 - 3
drivers/net/ethernet/mellanox/mlx4/en_netdev.c

@@ -503,9 +503,7 @@ static void mlx4_en_do_set_multicast(struct work_struct *work)
 				/* remove from list */
 				list_del(&mclist->list);
 				kfree(mclist);
-			}
-
-			if (mclist->action == MCLIST_ADD) {
+			} else if (mclist->action == MCLIST_ADD) {
 				/* attach the address */
 				memcpy(&mc_list[10], mclist->addr, ETH_ALEN);
 				/* needed for B0 steering support */