1. 01 Apr, 2010 1 commit
  2. 30 Mar, 2010 1 commit
    • Julia Lawall's avatar
      drivers/serial/sunsu.c: Correct use after free · c4a3987f
      Julia Lawall authored
      The of_iounmap is at the out_unmap label, but at that point up has already
      been freed.  The free cannot be moved to the out_unmap label, because that
      label is reachable from cases where up should not be freed.  So the call to
      of_iounmap is just duplicated, and the goto converted to a return.
      
      A simplified version of the semantic match that finds this problem is as
      follows: (http://coccinelle.lip6.fr/)
      
      // <smpl>
      @@
      expression x,e;
      identifier f;
      iterator I;
      statement S;
      @@
      
      *kfree(x);
      ... when != &x
          when != x = e
          when != I(x,...) S
      *x->f
      // </smpl>
      Signed-off-by: default avatarJulia Lawall <julia@diku.dk>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      c4a3987f
  3. 29 Mar, 2010 1 commit
  4. 28 Mar, 2010 1 commit
  5. 27 Mar, 2010 1 commit
  6. 16 Mar, 2010 3 commits
  7. 14 Mar, 2010 1 commit
  8. 08 Mar, 2010 1 commit
  9. 03 Mar, 2010 4 commits
  10. 02 Mar, 2010 12 commits
  11. 01 Mar, 2010 14 commits