Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0dd38667 authored by Dan Carpenter's avatar Dan Carpenter Committed by Luciano Coelho
Browse files

wl12xx: use after free in debug code 



If debugging is turned on, then wl1271_dump() dereferences a freed
variable.

Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Signed-off-by: default avatarLuciano Coelho <luciano.coelho@nokia.com>
parent 3c2c04a1

drivers/net/wireless/wl12xx/spi.c

+1 −1
Original line number Diff line number Diff line
@@ -110,9 +110,9 @@ static void wl1271_spi_reset(struct wl1271 *wl) 
	spi_message_add_tail(&t, &m);



	spi_sync(wl_to_spi(wl), &m);

	kfree(cmd);



	wl1271_dump(DEBUG_SPI, "spi reset -> ", cmd, WSPI_INIT_CMD_LEN);

	kfree(cmd);

}



static void wl1271_spi_init(struct wl1271 *wl)