Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5ec11ed2 authored by Mustafa Ismail's avatar Mustafa Ismail Committed by Doug Ledford
Browse files

i40iw: Do not access pointer after free 



Child_listen_node pointer is used in a debug print after kfree.
Move the print before kfree.

Signed-off-by: default avatarMustafa Ismail <mustafa.ismail@intel.com>
Signed-off-by: default avatarShiraz Saleem <shiraz.saleem@intel.com>
Signed-off-by: default avatarDoug Ledford <dledford@redhat.com>
parent 342c387b

drivers/infiniband/hw/i40iw/i40iw_cm.c

+2 −2
Original line number Diff line number Diff line
@@ -1567,12 +1567,12 @@ static enum i40iw_status_code i40iw_del_multiple_qhash( 
		ret = i40iw_manage_qhash(iwdev, cm_info,

					 I40IW_QHASH_TYPE_TCP_SYN,

					 I40IW_QHASH_MANAGE_TYPE_DELETE, NULL, false);

		kfree(child_listen_node);

		cm_parent_listen_node->cm_core->stats_listen_nodes_destroyed++;

		i40iw_debug(&iwdev->sc_dev,

			    I40IW_DEBUG_CM,

			    "freed pointer = %p\n",

			    child_listen_node);

		kfree(child_listen_node);

		cm_parent_listen_node->cm_core->stats_listen_nodes_destroyed++;

	}

	spin_unlock_irqrestore(&iwdev->cm_core.listen_list_lock, flags);