diff options
| author | Stefan Weil <[email protected]> | 2010-08-03 08:53:45 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2010-08-04 16:18:03 -0700 |
| commit | 2a1bc0d56b446104a3a728925b3a7afbef64afa7 (patch) | |
| tree | 2c484fa53420a3c673142551daccc45b0f803d10 | |
| parent | 889635fd6b269963f7e68b53c9f0f60c8008a77f (diff) | |
davinci_emac: Fix use after free in davinci_emac_remove
free_netdev finally calls kfree which makes the contents
of ndev and priv (private data contained in ndev) invalid.
So iounmap should be called before free_netdev.
Cc: David S. Miller <[email protected]>
Cc: Chaithrika U S <[email protected]>
Cc: Sriramakrishnan <[email protected]>
Cc: Kevin Hilman <[email protected]>
Cc: [email protected]
Cc: [email protected]
Signed-off-by: Stefan Weil <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
| -rw-r--r-- | drivers/net/davinci_emac.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/davinci_emac.c b/drivers/net/davinci_emac.c index d0824e322068..7fbd052ddb0a 100644 --- a/drivers/net/davinci_emac.c +++ b/drivers/net/davinci_emac.c @@ -2944,8 +2944,8 @@ static int __devexit davinci_emac_remove(struct platform_device *pdev) release_mem_region(res->start, res->end - res->start + 1); unregister_netdev(ndev); - free_netdev(ndev); iounmap(priv->remap_addr); + free_netdev(ndev); clk_disable(emac_clk); clk_put(emac_clk); |