diff options
| author | Dan Carpenter <error27@gmail.com> | 2011-07-08 03:21:15 -0400 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2011-07-26 16:27:24 -0400 |
| commit | 276556dbd2d9f56f8933393f927e88fae142ce8f (patch) | |
| tree | f5764c864cde2688b76792647489fa6ba59056a9 | |
| parent | 6e6e8c510a84fe3237ef02b954e58cca6a3f4b1a (diff) | |
NFC: pn533: use after free in pn533_disconnect()
We freed "dev" on the line before.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| -rw-r--r-- | drivers/nfc/pn533.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/nfc/pn533.c b/drivers/nfc/pn533.c index 037231540719..c77e0543e502 100644 --- a/drivers/nfc/pn533.c +++ b/drivers/nfc/pn533.c | |||
| @@ -1596,7 +1596,7 @@ static void pn533_disconnect(struct usb_interface *interface) | |||
| 1596 | usb_free_urb(dev->out_urb); | 1596 | usb_free_urb(dev->out_urb); |
| 1597 | kfree(dev); | 1597 | kfree(dev); |
| 1598 | 1598 | ||
| 1599 | nfc_dev_info(&dev->interface->dev, "NXP PN533 NFC device disconnected"); | 1599 | nfc_dev_info(&interface->dev, "NXP PN533 NFC device disconnected"); |
| 1600 | } | 1600 | } |
| 1601 | 1601 | ||
| 1602 | static struct usb_driver pn533_driver = { | 1602 | static struct usb_driver pn533_driver = { |