subject:"net\/bluetooth\/rfcomm\/tty.c\: use\-after\-free"

Re: net/bluetooth/rfcomm/tty.c: use-after-free

2007-07-26 Thread David Miller

From: Marcel Holtmann <[EMAIL PROTECTED]> Date: Mon, 23 Jul 2007 09:47:12 +0200 > Hi Adrian, > > > Commit 8de0a15483b357d0f0b821330ec84d1660cadc4e added the following > > use-after-free in net/bluetooth/rfcomm/tty.c: ... > > Spotted by the Coverity checker. > > really good catch. I fully overl

Re: net/bluetooth/rfcomm/tty.c: use-after-free

2007-07-23 Thread Marcel Holtmann

Hi Adrian, > Commit 8de0a15483b357d0f0b821330ec84d1660cadc4e added the following > use-after-free in net/bluetooth/rfcomm/tty.c: > > <-- snip --> > > ... > static int rfcomm_dev_add(struct rfcomm_dev_req *req, struct rfcomm_dlc *dlc) > { > ... > if (IS_ERR(dev->tty_dev)) { >

net/bluetooth/rfcomm/tty.c: use-after-free

2007-07-22 Thread Adrian Bunk

Commit 8de0a15483b357d0f0b821330ec84d1660cadc4e added the following use-after-free in net/bluetooth/rfcomm/tty.c: <-- snip --> ... static int rfcomm_dev_add(struct rfcomm_dev_req *req, struct rfcomm_dlc *dlc) { ... if (IS_ERR(dev->tty_dev)) { list_del(&dev->list);