Jeffrey Carlyle edce6820a9 scatterlist: prevent invalid free when alloc fails
When alloc fails, free_table is being called. Depending on the number of
bytes requested, we determine if we are going to call _get_free_page()
or kmalloc(). When alloc fails, our math is wrong (due to sg_size - 1),
and the last buffer is wrongfully assumed to have been allocated by
kmalloc. Hence, kfree gets called and a panic occurs.

Signed-off-by: Jeffrey Carlyle <jeff.carlyle@motorola.com>
Signed-off-by: Olusanya Soyannwo <c23746@motorola.com>
Acked-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
2010-08-30 19:55:09 +02:00
..
2008-07-24 10:47:33 -07:00
2009-11-03 16:06:53 +01:00
2010-07-11 22:16:32 +02:00
2009-01-01 10:12:19 +10:30
2009-06-18 13:04:05 -07:00
2010-05-25 08:07:06 -07:00
2010-04-06 15:52:11 -07:00
2008-07-26 12:00:07 -07:00
2010-08-09 20:45:05 -07:00
2009-12-14 23:55:33 +01:00
2010-05-21 09:37:29 -07:00
2009-10-01 21:17:49 +02:00
2009-12-15 08:53:33 -08:00
2010-06-16 18:08:13 +02:00
2010-01-11 09:34:05 -08:00
2010-03-06 11:26:35 -08:00
2008-07-26 12:00:10 -07:00
2010-05-19 22:40:47 -04:00