diff options
Diffstat (limited to 'trunk/2.6.22/20034_145-xenbus-error-path.patch1')
-rw-r--r-- | trunk/2.6.22/20034_145-xenbus-error-path.patch1 | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/trunk/2.6.22/20034_145-xenbus-error-path.patch1 b/trunk/2.6.22/20034_145-xenbus-error-path.patch1 new file mode 100644 index 0000000..ffcf2e9 --- /dev/null +++ b/trunk/2.6.22/20034_145-xenbus-error-path.patch1 @@ -0,0 +1,24 @@ +# HG changeset 145 patch +# User kfraser@localhost.localdomain +# Date 1185293349 -3600 +# Node ID 3b0bce92b2f254242c785d2662776e04a0817301 +# Parent d88e59a7334ae584900a9f7221d494bcd9ef2a63 +Subject: xenbus: Fix obvious use-after-free spotted by Coverity checker. +Signed-off-by: Adrian Bunk <bunk@stusta.de> + +Acked-by: jbeulich@novell.com + +Index: head-2007-08-07/drivers/xen/xenbus/xenbus_xs.c +=================================================================== +--- head-2007-08-07.orig/drivers/xen/xenbus/xenbus_xs.c 2007-08-07 09:59:32.000000000 +0200 ++++ head-2007-08-07/drivers/xen/xenbus/xenbus_xs.c 2007-08-07 10:00:04.000000000 +0200 +@@ -802,8 +802,8 @@ static int process_msg(void) + msg->u.watch.vec = split(body, msg->hdr.len, + &msg->u.watch.vec_size); + if (IS_ERR(msg->u.watch.vec)) { +- kfree(msg); + err = PTR_ERR(msg->u.watch.vec); ++ kfree(msg); + goto out; + } + |