Commit 683be16e authored Mar 20, 2010 by Dan Carpenter Committed by Chris Mason Mar 30, 2010

Btrfs: dereferencing freed memory



The original code dereferenced range on the next line.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Chris Mason <chris.mason@oracle.com>

parent f3eae7e8

fs/btrfs/ioctl.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -1374,6 +1374,7 @@ static int btrfs_ioctl_defrag(struct file file, void __user argp)
		sizeof(*range))) {
		ret = -EFAULT;
		kfree(range);
		goto out;
		}
		/* compression requires us to start the IO */
		if ((range->flags & BTRFS_DEFRAG_RANGE_COMPRESS)) {