https://github.com/torvalds/linux
Revision 36010ff6788a058147ae15a1aebf97fd30fa51a9 authored by Marcel Holtmann on 06 October 2008, 10:22:51 UTC, committed by Marcel Holtmann on 06 October 2008, 10:22:51 UTC
The transfer buffer of an URB will be automatically freed when using
the URB_FREE_BUFFER transfer_flag. So the extra calls to kfree() will
cause a double free.

Reported-by: Justin Mattock <justinmattock@gmail.com>
Signed-off-by: Rabin Vincent <rabin@rab.in>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
1 parent 94aca1d
History
Tip revision: 36010ff6788a058147ae15a1aebf97fd30fa51a9 authored by Marcel Holtmann on 06 October 2008, 10:22:51 UTC
[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers
Tip revision: 36010ff
File Mode Size
Documentation
arch
block
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
usr
virt
.gitignore -rw-r--r-- 867 bytes
.mailmap -rw-r--r-- 3.7 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 90.7 KB
Kbuild -rw-r--r-- 2.4 KB
MAINTAINERS -rw-r--r-- 99.5 KB
Makefile -rw-r--r-- 55.4 KB
README -rw-r--r-- 16.5 KB
REPORTING-BUGS -rw-r--r-- 3.1 KB

README

back to top