From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Tue, 19 Jun 2012 13:52:33 +0000 (-0500)
Subject: libceph: fix NULL dereference in reset_connection()
X-Git-Tag: v3.4.20~58
X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=8124d55a2d2c8d738c6ac5b95e6171fe3d1b5af3;p=karo-tx-linux.git

libceph: fix NULL dereference in reset_connection()

(cherry picked from commit 26ce171915f348abd1f41da1ed139d93750d987f)

We dereference "con->in_msg" on the line after it was set to NULL.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Alex Elder <elder@inktank.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

diff --git a/net/ceph/messenger.c b/net/ceph/messenger.c
index 59e418b3597e..7e208969cc42 100644
--- a/net/ceph/messenger.c
+++ b/net/ceph/messenger.c
@@ -440,7 +440,7 @@ static void reset_connection(struct ceph_connection *con)
 		con->in_msg->con = NULL;
 		ceph_msg_put(con->in_msg);
 		con->in_msg = NULL;
-		ceph_con_put(con->in_msg->con);
+		ceph_con_put(con);
 	}
 
 	con->connect_seq = 0;