Re: [patch 1/2] memstick: use after free in msb_disk_release()

2012-09-29 Thread Maxim Levitsky
On Sat, 2012-09-29 at 10:11 +0300, Dan Carpenter wrote: > The original code dereferenced "msb" after freeing it. > > Signed-off-by: Dan Carpenter > > diff --git a/drivers/memstick/core/ms_block.c > b/drivers/memstick/core/ms_block.c > index c815fe5..a8e8915 100644 > ---

[patch 1/2] memstick: use after free in msb_disk_release()

2012-09-29 Thread Dan Carpenter
The original code dereferenced "msb" after freeing it. Signed-off-by: Dan Carpenter diff --git a/drivers/memstick/core/ms_block.c b/drivers/memstick/core/ms_block.c index c815fe5..a8e8915 100644 --- a/drivers/memstick/core/ms_block.c +++ b/drivers/memstick/core/ms_block.c @@ -1983,9 +1983,9 @@

[patch 1/2] memstick: use after free in msb_disk_release()

2012-09-29 Thread Dan Carpenter
The original code dereferenced msb after freeing it. Signed-off-by: Dan Carpenter dan.carpen...@oracle.com diff --git a/drivers/memstick/core/ms_block.c b/drivers/memstick/core/ms_block.c index c815fe5..a8e8915 100644 --- a/drivers/memstick/core/ms_block.c +++ b/drivers/memstick/core/ms_block.c

Re: [patch 1/2] memstick: use after free in msb_disk_release()

2012-09-29 Thread Maxim Levitsky
On Sat, 2012-09-29 at 10:11 +0300, Dan Carpenter wrote: The original code dereferenced msb after freeing it. Signed-off-by: Dan Carpenter dan.carpen...@oracle.com diff --git a/drivers/memstick/core/ms_block.c b/drivers/memstick/core/ms_block.c index c815fe5..a8e8915 100644 ---