On Sun, Apr 23, 2017 at 06:23:21PM +0800, Pan Bian wrote: > From: Pan Bian <bianpan2...@163.com> > > In function amd_iommu_bind_pasid(), the control flow jumps to label > out_free when pasid_state->mm and mm is NULL. And mmput(mm) is called. > In function mmput(mm), mm is referenced without validation. This will > result in a NULL dereference bug. This patch fixes the bug. > > Signed-off-by: Pan Bian <bianpan2...@163.com>
Applied, thanks.
