Julia Lawall
f2d2420bbf
SA1111: Eliminate use after free
...
__sa1111_remove always frees its argument, so the subsequent reference to
sachip->saved_state represents a use after free. __sa1111_remove does not
appear to use the saved_state field, so the patch simply frees it first.
A simplified version of the semantic patch that finds this problem is as
follows: (http://coccinelle.lip6.fr/ )
// <smpl>
@@
expression E,E2;
@@
__sa1111_remove(E)
...
(
E = E2
|
* E
)
// </smpl>
Signed-off-by: Julia Lawall <julia@diku.dk>
Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
2010-07-30 23:19:30 +01:00
..
2010-07-29 11:31:21 +01:00
2010-07-30 23:19:30 +01:00
2010-06-10 07:12:18 +02:00
2010-07-29 14:04:37 +01:00
2010-07-14 23:28:06 +01:00
2010-07-26 12:18:16 +01:00
2010-03-30 22:02:32 +09:00
2010-05-24 20:40:13 +01:00
2010-05-17 17:24:04 +01:00
2010-07-26 10:33:07 +01:00
2010-05-02 21:55:49 +04:00
2010-05-28 01:37:39 +02:00
2010-03-08 20:21:04 +00:00
2010-02-12 17:27:52 +00:00
2010-05-25 00:38:26 -06:00
2010-07-22 09:20:50 +01:00
2010-03-01 09:15:15 -08:00
2010-07-26 10:33:05 +01:00
2010-05-17 17:24:04 +01:00
2010-03-30 22:02:32 +09:00
2010-05-17 17:24:04 +01:00
2010-03-30 22:02:32 +09:00
2010-05-17 17:24:04 +01:00
2010-03-30 22:02:32 +09:00
2010-03-30 22:02:32 +09:00
2010-07-26 10:33:08 +01:00
2010-02-12 17:27:52 +00:00
2010-02-12 17:27:52 +00:00
2010-03-30 22:02:32 +09:00
2010-02-25 22:09:41 +00:00
2010-05-11 17:25:06 +02:00
2010-06-07 16:16:33 -07:00
2010-03-08 20:21:04 +00:00
2010-03-08 20:21:04 +00:00
2010-05-25 12:06:33 -07:00
2010-07-01 09:52:39 +02:00
2010-05-20 23:43:18 +01:00
2010-05-18 08:32:33 +02:00
2010-03-08 20:21:04 +00:00
2010-03-30 22:02:32 +09:00
2010-05-27 10:36:08 +01:00
2010-07-26 10:33:07 +01:00
2010-01-27 22:03:00 +00:00
2010-05-20 11:37:23 -07:00
2010-06-28 15:47:04 +03:00
2010-05-26 13:07:55 +01:00
2010-03-30 22:02:32 +09:00
2010-07-13 16:09:07 +08:00
2010-07-30 23:16:32 +01:00
2010-03-30 22:02:32 +09:00
2010-03-08 20:21:04 +00:00
2010-05-28 19:31:34 +09:00
2009-12-09 19:43:33 -08:00
2010-05-20 19:44:18 +09:00
2010-05-20 09:41:44 -07:00
2010-05-18 18:46:30 +09:00
2010-05-26 17:34:40 +01:00
2010-05-20 09:20:59 -07:00
2010-05-26 19:09:50 +09:00
2010-07-05 16:01:04 +09:00
2010-05-26 19:09:50 +09:00
2010-07-05 16:01:04 +09:00
2010-05-24 20:40:11 +01:00
2010-07-26 10:33:06 +01:00
2010-05-18 08:17:56 +01:00
2010-05-04 16:54:54 +01:00
2010-05-24 20:39:52 +01:00
2010-05-28 01:37:47 +02:00
2010-07-29 14:04:35 +01:00
2010-05-17 17:24:04 +01:00
2010-07-30 23:16:32 +01:00
2010-07-22 09:18:52 +01:00
2010-07-30 23:16:07 +01:00
2010-05-24 20:40:12 +01:00
2010-05-17 11:53:59 +01:00
2010-04-29 18:03:49 +01:00
2010-05-20 23:43:18 +01:00
2010-05-27 10:36:08 +01:00
2010-06-10 15:37:41 +03:00
2010-05-14 01:04:19 +01:00
2010-06-14 00:45:26 +08:00
2010-05-20 19:44:18 +09:00
2010-07-05 16:01:04 +09:00
2010-07-05 16:01:04 +09:00
2010-07-26 10:33:06 +01:00
2010-03-30 22:02:32 +09:00
2010-05-02 09:35:38 +01:00
2010-07-12 21:14:53 +01:00
2010-05-27 10:32:06 +01:00
2010-07-01 10:13:58 +01:00
2010-02-24 01:52:06 +00:00
2010-05-24 23:08:36 +01:00