aboutsummaryrefslogtreecommitdiff
path: root/drivers/pcmcia/pxa2xx_balloon3.c
diff options
context:
space:
mode:
authorLinus Walleij <linus.walleij@linaro.org>2014-02-13 10:39:01 +0100
committerBen Hutchings <ben@decadent.org.uk>2014-04-02 00:58:53 +0100
commit74f925dea76124060a2021460a26c6ddc815bfff (patch)
tree02aef0a4bb28b09afcd8c715982d32018fb67809 /drivers/pcmcia/pxa2xx_balloon3.c
parent426f6c8a5051be7dafe96dba65ff73b778ba7839 (diff)
dma: ste_dma40: don't dereference free:d descriptor
commit e9baa9d9d520fb0e24cca671e430689de2d4a4b2 upstream. It appears that in the DMA40 driver the DMA tasklet will very often dereference memory for a descriptor just free:d from the DMA40 slab. Nothing happens because no other part of the driver has yet had a chance to claim this memory, but it's really nasty to dereference free:d memory, so let's check the flag before the descriptor is free and store it in a bool variable. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Vinod Koul <vinod.koul@intel.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'drivers/pcmcia/pxa2xx_balloon3.c')
0 files changed, 0 insertions, 0 deletions