mirror of
https://github.com/torvalds/linux.git
synced 2024-11-23 04:31:50 +00:00
2ffa9a5d76
If tb_drom_read() fails, sw->drom is freed but not set to NULL. sw->drom
is then freed again in the error path of tb_switch_alloc().
The bug can be triggered by unplugging a thunderbolt device shortly after
it is detected by the thunderbolt driver.
Clear sw->drom if tb_drom_read() fails.
[bhelgaas: add Fixes:, stable versions of interest]
Fixes:
|
||
---|---|---|
.. | ||
cap.c | ||
ctl.c | ||
ctl.h | ||
eeprom.c | ||
Kconfig | ||
Makefile | ||
nhi_regs.h | ||
nhi.c | ||
nhi.h | ||
path.c | ||
switch.c | ||
tb_regs.h | ||
tb.c | ||
tb.h | ||
tunnel_pci.c | ||
tunnel_pci.h |