[PATCH] Fix crash when unloading yenta_socket in Linux 2.5.69
socket->base is unmapped in yenta_close(), which is called by cardbus_remove(). The value of socket->base is not changed to NULL, so it becomes invalid. Then cardbus_remove() calls class_device_unregister(), which calls pcmcia_unregister_socket(), which it turn tries to access memory space of the socket.
Showing
Please register or sign in to comment