9p: fix use after free
authorEric Van Hensbergen <ericvh@ericvh-desktop.austin.ibm.com>
Thu, 26 Jul 2007 19:04:54 +0000 (14:04 -0500)
committerEric Van Hensbergen <ericvh@ericvh-laptop.austin.ibm.com>
Thu, 23 Aug 2007 15:12:48 +0000 (10:12 -0500)
commit1a3cac6c6d1f56dc26939eb41be29844f897c15a
tree02922961c01db29922737f37796265103e96dc6b
parent8eb891fc809b2300137bcd247025628c06c95a63
9p: fix use after free

On 7/22/07, Adrian Bunk <bunk@stusta.de> wrote:
     The Coverity checker spotted the following use-after-free
     in net/9p/mux.c:

     <--  snip  -->

     ...
     struct p9_conn *p9_conn_create(struct p9_transport *trans, int msize,
                                         unsigned char *extended)
     {
     ...
             if (!m->tagpool) {
                     kfree(m);
                     return ERR_PTR(PTR_ERR(m->tagpool));
             }
     ...

     <--  snip  -->

Also spotted was a leak of the same structure further down in the function.

Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>
net/9p/mux.c