Johan Hovold fffc151381 greybus: operation: fix another cancellation use-after-free ...

An incoming operation could already be scheduled even if
gb_operation_result_set succeeds as its initial status is -EINPROGRESS.

Avoid potential use-after-free by never dropping the reference count for
incoming operations as part of cancellation.

Signed-off-by: Johan Hovold <johan@hovoldconsulting.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

2015-07-15 12:39:13 -07:00

drivers/staging/greybus

greybus: operation: fix another cancellation use-after-free

2015-07-15 12:39:13 -07:00

Description

No description provided

3.4 GiB

Languages

C 97.1%

Assembly 1%

Shell 0.6%

Rust 0.4%

Python 0.4%

Other 0.3%