linux/drivers/mtd/ubi
Artem Bityutskiy e57e0d8e81 UBI: fix use-after-free on error path
When we fail to erase a PEB, we free the corresponding erase entry object,
but then re-schedule this object if the error code was something like -EAGAIN.
Obviously, it is a bug to use the object after we have freed it.

Reported-by: Emese Revfy <re.emese@gmail.com>
Cc: stable@kernel.org [v2.6.23+]
Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
2012-01-05 11:19:19 +02:00
..
build.c
cdev.c
debug.c
debug.h
eba.c UBI: fix missing scrub when there is a bit-flip 2011-11-30 17:43:42 +05:30
gluebi.c
io.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
kapi.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
Kconfig
Makefile
misc.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
scan.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
scan.h
ubi-media.h
ubi.h UBI: fix missing scrub when there is a bit-flip 2011-11-30 17:43:42 +05:30
upd.c
vmt.c mtd: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:11 -04:00
vtbl.c mtd: utilize `mtd_is_*()' functions 2011-09-21 09:19:06 +03:00
wl.c UBI: fix use-after-free on error path 2012-01-05 11:19:19 +02:00