commit | 68050eb6c611527232fe5574c7306e97e47499ef | [log] [tgz] |
---|---|---|
author | Dan Carpenter <dan.carpenter@oracle.com> | Fri Nov 18 14:34:10 2016 +0300 |
committer | Thierry Reding <treding@nvidia.com> | Fri Nov 18 14:32:13 2016 +0100 |
tree | 268a1aa8b6f5250b1c637c3f049ed29baa3e6a0d | |
parent | 0fe88461a0ec95a71950b4841f139a62ed63dc81 [diff] |
mailbox: tegra-hsp: Use after free in tegra_hsp_remove_doorbells() We have to use the _safe version of list_for_each() because we're freeing the pointer as we go along. (This might not show up testing depending on what config options you have enabled). Fixes: 0fe88461a0ec ("mailbox: Add Tegra HSP driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Thierry Reding <treding@nvidia.com>