Tag: c4a3987fa075b2d15ebc3d59b01fb7ed403cd3e1

drivers/serial/sunsu.c: Correct use after free

Author: Julia Lawall <julia@diku.dk> The of_iounmap is at the out_unmap label, but at that point up has already been freed. The free cannot be moved to the out_unmap label, because that label is reachable from cases where up should not be freed. So the call to of_iounmap is just duplicated, and the goto converted to …

Continue reading