[linux-usb-devel] [PATCH] USB MCT_232 use-after-free bug fix

[Greg KH]

Hi,

Here's a patch that fixes the use-after-free bug that Seth Hallem found
in the MCT_232 usb-serial driver.  It is against 2.4.3-pre4.

thanks,

greg k-h

-- 
greg@(kroah|wirex).com

diff -Naur -X dontdiff linux-2.4.3-pre4/drivers/usb/serial/mct_u232.c 
linux-2.4.3-pre4-greg/drivers/usb/serial/mct_u232.c
--- linux-2.4.3-pre4/drivers/usb/serial/mct_u232.c      Thu Feb 22 23:43:26 2001
+++ linux-2.4.3-pre4-greg/drivers/usb/serial/mct_u232.c Mon Mar 19 14:24:53 2001
@@ -346,8 +346,8 @@
                        mct_u232_close (&serial->port[i], NULL);
                }
                /* My special items, the standard routines free my urbs */
-               if (serial->port->private)
-                       kfree(serial->port->private);
+               if (serial->port[i].private)
+                       kfree(serial->port[i].private);
        }
 } /* mct_u232_shutdown */