提交 0dd38667 编写于 作者: D Dan Carpenter 提交者: Luciano Coelho

wl12xx: use after free in debug code

If debugging is turned on, then wl1271_dump() dereferences a freed
variable.
Signed-off-by: NDan Carpenter <error27@gmail.com>
Signed-off-by: NLuciano Coelho <luciano.coelho@nokia.com>
上级 3c2c04a1
......@@ -110,9 +110,9 @@ static void wl1271_spi_reset(struct wl1271 *wl)
spi_message_add_tail(&t, &m);
spi_sync(wl_to_spi(wl), &m);
kfree(cmd);
wl1271_dump(DEBUG_SPI, "spi reset -> ", cmd, WSPI_INIT_CMD_LEN);
kfree(cmd);
}
static void wl1271_spi_init(struct wl1271 *wl)
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册