* bug report: ath6kl: use after free
@ 2010-10-16 18:39 Dan Carpenter
0 siblings, 0 replies; only message in thread
From: Dan Carpenter @ 2010-10-16 18:39 UTC (permalink / raw)
To: kernel-janitors
Hi Vipin,
There is a use after free bug in ar6000_ioctl_set_channelParams(). I'm
not sure how to fix it.
drivers/staging/ath6kl/os/linux/ioctl.c +374
ar6000_ioctl_set_channelParams(51) warn: 'cmdp' was already freed.
370 if (cmd.numChannels > 1) {
371 kfree(cmdp);
^^^^
freed here.
372 }
373
374 ar->ap_wmode = cmdp->phyMode;
^^^^^^
dereferenced here.
regards,
dan carpenter
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2010-10-16 18:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-10-16 18:39 bug report: ath6kl: use after free Dan Carpenter
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).