Module Name: src
Committed By: maxv
Date: Sun Jun 28 09:15:45 UTC 2015
Modified Files:
src/sys/arch/pmax/tc: dt.c
Log Message:
Use-after-free.
ok christos@
Found by The Brainy Code Scanner.
To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 src/sys/arch/pmax/tc/dt.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/sys/arch/pmax/tc/dt.c
diff -u src/sys/arch/pmax/tc/dt.c:1.11 src/sys/arch/pmax/tc/dt.c:1.12
--- src/sys/arch/pmax/tc/dt.c:1.11 Sat Jun 4 01:37:36 2011
+++ src/sys/arch/pmax/tc/dt.c Sun Jun 28 09:15:45 2015
@@ -1,4 +1,4 @@
-/* $NetBSD: dt.c,v 1.11 2011/06/04 01:37:36 tsutsui Exp $ */
+/* $NetBSD: dt.c,v 1.12 2015/06/28 09:15:45 maxv Exp $ */
/*-
* Copyright (c) 2002, 2003 The NetBSD Foundation, Inc.
@@ -133,7 +133,7 @@ SOFTWARE.
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: dt.c,v 1.11 2011/06/04 01:37:36 tsutsui Exp $");
+__KERNEL_RCSID(0, "$NetBSD: dt.c,v 1.12 2015/06/28 09:15:45 maxv Exp $");
#include <sys/param.h>
#include <sys/systm.h>
@@ -225,6 +225,7 @@ dt_attach(device_t parent, device_t self
if (sc->sc_sih == NULL) {
printf("%s: memory exhausted\n", device_xname(self));
free(msg, M_DEVBUF);
+ return;
}
SIMPLEQ_INIT(&sc->sc_queue);
