alistair23-linux/drivers/mtd/ubi
Artem Bityutskiy e57e0d8e81 UBI: fix use-after-free on error path
When we fail to erase a PEB, we free the corresponding erase entry object,
but then re-schedule this object if the error code was something like -EAGAIN.
Obviously, it is a bug to use the object after we have freed it.

Reported-by: Emese Revfy <re.emese@gmail.com>
Cc: stable@kernel.org [v2.6.23+]
Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
2012-01-05 11:19:19 +02:00
..
build.c UBI: fix oops in error path 2011-06-01 11:23:12 +03:00
cdev.c fs: push i_mutex and filemap_write_and_wait down into ->fsync() handlers 2011-07-20 20:47:59 -04:00
debug.c UBI: switch debugging tests knobs to debugfs 2011-06-01 11:23:12 +03:00
debug.h UBI: do not link debug messages when debugging is disabled 2011-08-19 19:02:27 +03:00
eba.c UBI: fix missing scrub when there is a bit-flip 2011-11-30 17:43:42 +05:30
gluebi.c
io.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
kapi.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
Kconfig
Makefile
misc.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
scan.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
scan.h
ubi-media.h
ubi.h UBI: fix missing scrub when there is a bit-flip 2011-11-30 17:43:42 +05:30
upd.c
vmt.c mtd: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:11 -04:00
vtbl.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
wl.c UBI: fix use-after-free on error path 2012-01-05 11:19:19 +02:00