Jeffrey Carlyle edce6820a9 scatterlist: prevent invalid free when alloc fails
When alloc fails, free_table is being called. Depending on the number of
bytes requested, we determine if we are going to call _get_free_page()
or kmalloc(). When alloc fails, our math is wrong (due to sg_size - 1),
and the last buffer is wrongfully assumed to have been allocated by
kmalloc. Hence, kfree gets called and a panic occurs.

Signed-off-by: Jeffrey Carlyle <jeff.carlyle@motorola.com>
Signed-off-by: Olusanya Soyannwo <c23746@motorola.com>
Acked-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
2010-08-30 19:55:09 +02:00
..
2005-10-18 08:26:15 -07:00
2007-05-11 05:38:25 -04:00
2008-07-24 10:47:33 -07:00
2008-06-06 11:29:10 -07:00
2007-07-16 09:05:50 -07:00
2009-11-03 16:06:53 +01:00
2007-07-17 10:23:04 -07:00
2006-06-25 10:01:20 -07:00
2005-04-16 15:20:36 -07:00
2006-06-25 10:01:20 -07:00
2007-05-10 18:24:13 +02:00
2010-07-11 22:16:32 +02:00
2005-04-16 15:20:36 -07:00
2009-01-01 10:12:19 +10:30
2008-04-29 08:11:16 -07:00
2009-06-18 13:04:05 -07:00
2010-05-25 08:07:06 -07:00
2005-04-16 15:20:36 -07:00
2010-04-06 15:52:11 -07:00
2006-06-20 20:24:58 -07:00
2008-07-26 12:00:07 -07:00
2010-08-09 20:45:05 -07:00
2006-10-06 08:53:40 -07:00
2009-12-14 23:55:33 +01:00
2010-05-21 09:37:29 -07:00
2009-10-01 21:17:49 +02:00
2009-12-15 08:53:33 -08:00
2005-04-16 15:20:36 -07:00
2010-06-16 18:08:13 +02:00
2010-01-11 09:34:05 -08:00
2010-03-06 11:26:35 -08:00
2008-07-26 12:00:10 -07:00
2010-05-19 22:40:47 -04:00