Commit 48a29516 authored by Dan Carpenter's avatar Dan Carpenter Committed by David S. Miller

cpmac: use after free

The original code dereferenced "cpmac_mii" after calling
"mdiobus_free(cpmac_mii);"
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Reviewed-by: default avatarJiri Pirko <jpirko@redhat.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 87c1e12b
...@@ -1290,8 +1290,8 @@ void __devexit cpmac_exit(void) ...@@ -1290,8 +1290,8 @@ void __devexit cpmac_exit(void)
{ {
platform_driver_unregister(&cpmac_driver); platform_driver_unregister(&cpmac_driver);
mdiobus_unregister(cpmac_mii); mdiobus_unregister(cpmac_mii);
mdiobus_free(cpmac_mii);
iounmap(cpmac_mii->priv); iounmap(cpmac_mii->priv);
mdiobus_free(cpmac_mii);
} }
module_init(cpmac_init); module_init(cpmac_init);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment