]> git.karo-electronics.de Git - karo-tx-linux.git/commit
mailbox: tegra-hsp: Use after free in tegra_hsp_remove_doorbells()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 18 Nov 2016 11:34:10 +0000 (14:34 +0300)
committerThierry Reding <treding@nvidia.com>
Fri, 18 Nov 2016 13:32:13 +0000 (14:32 +0100)
commit68050eb6c611527232fe5574c7306e97e47499ef
tree268a1aa8b6f5250b1c637c3f049ed29baa3e6a0d
parent0fe88461a0ec95a71950b4841f139a62ed63dc81
mailbox: tegra-hsp: Use after free in tegra_hsp_remove_doorbells()

We have to use the _safe version of list_for_each() because we're
freeing the pointer as we go along.  (This might not show up testing
depending on what config options you have enabled).

Fixes: 0fe88461a0ec ("mailbox: Add Tegra HSP driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Thierry Reding <treding@nvidia.com>
drivers/mailbox/tegra-hsp.c