Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b64dc04b authored by Jamie Iles's avatar Jamie Iles Committed by Herbert Xu
Browse files

crypto: picoxcell - fix possible invalid pointer dereference 



The completion callback will free the request so we must remove it from
the completion list before calling the callback.

Cc: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarJamie Iles <jamie@jamieiles.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent 30343ef1

drivers/crypto/picoxcell_crypto.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -1242,8 +1242,8 @@ static void spacc_spacc_complete(unsigned long data) 
	spin_unlock_irqrestore(&engine->hw_lock, flags);

	spin_unlock_irqrestore(&engine->hw_lock, flags);





	list_for_each_entry_safe(req, tmp, &completed, list) {

	list_for_each_entry_safe(req, tmp, &completed, list) {

		req->complete(req);

		list_del(&req->list);

		list_del(&req->list);

		req->complete(req);

	}

	}

}

}