public inbox for kernel-janitors@vger.kernel.org
 help / color / mirror / Atom feed
* bug report: frontier: use after free
@ 2010-03-16 10:19 Dan Carpenter
  0 siblings, 0 replies; only message in thread
From: Dan Carpenter @ 2010-03-16 10:19 UTC (permalink / raw)
  To: kernel-janitors

drivers/staging/frontier/alphatrack.c +854 usb_alphatrack_disconnect()
   845          /* if the device is not opened, then we clean up right now */
   846          if (!dev->open_count) {
   847                  up(&dev->sem);
   848                  usb_alphatrack_delete(dev);

	We free "dev" here.

   849          } else {
   850                  dev->intf = NULL;
   851                  up(&dev->sem);
   852          }
   853  
   854          atomic_set(&dev->writes_pending, 0);

	We use it here.

regards,
dan carpenter

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2010-03-16 10:19 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-03-16 10:19 bug report: frontier: use after free Dan Carpenter

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox