diff options
| author |   Mustafa Ismail <mustafa.ismail@intel.com> | 2016-07-12 11:48:41 -0500 |
|---|---|---|
| committer |   Doug Ledford <dledford@redhat.com> | 2016-08-02 14:17:38 -0400 |
| commit | 5ec11ed23ecf95666222d4c4563050d61e8c46f6 (patch) | |
| tree | 27250847846c5cd05cc5a83a20baaa30ee799410 /drivers/infiniband/hw/i40iw | |
| parent | i40iw: Correct and use size parameter to i40iw_reg_phys_mr (diff) | |
| download | linux-dev-5ec11ed23ecf95666222d4c4563050d61e8c46f6.tar.xz linux-dev-5ec11ed23ecf95666222d4c4563050d61e8c46f6.zip | |
i40iw: Do not access pointer after free
Child_listen_node pointer is used in a debug print after kfree.
Move the print before kfree.
Signed-off-by: Mustafa Ismail <mustafa.ismail@intel.com>
Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
Diffstat (limited to 'drivers/infiniband/hw/i40iw')
| -rw-r--r-- | drivers/infiniband/hw/i40iw/i40iw_cm.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/infiniband/hw/i40iw/i40iw_cm.c b/drivers/infiniband/hw/i40iw/i40iw_cm.c index d2fa72516960..5026dc79978a 100644 --- a/drivers/infiniband/hw/i40iw/i40iw_cm.c +++ b/drivers/infiniband/hw/i40iw/i40iw_cm.c @@ -1567,12 +1567,12 @@ static enum i40iw_status_code i40iw_del_multiple_qhash( ret = i40iw_manage_qhash(iwdev, cm_info, I40IW_QHASH_TYPE_TCP_SYN, I40IW_QHASH_MANAGE_TYPE_DELETE, NULL, false); - kfree(child_listen_node); - cm_parent_listen_node->cm_core->stats_listen_nodes_destroyed++; i40iw_debug(&iwdev->sc_dev, I40IW_DEBUG_CM, "freed pointer = %p\n", child_listen_node); + kfree(child_listen_node); + cm_parent_listen_node->cm_core->stats_listen_nodes_destroyed++; } spin_unlock_irqrestore(&iwdev->cm_core.listen_list_lock, flags); |