You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Vasily Averin 1174cf7301 [PATCH] smbfs: double free memory corruption ... smbfs allocates rq_trans2buffer to handle server's multi transaction2 response messages. As struct smb_request may be reused, rq_trans2buffer is freed before each new request. However if last servers's response is not multi but single trans2 message then new rq_trans2buffer is not allocated but last smb_rput still tries to free it again. To prevent this issue rq_trans2buffer pointer should be set to NULL after kfree. Signed-off-by: Vasily Averin <vvs@sw.ru> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		18 years ago
..
Makefile	…
cache.c	[PATCH] struct path: convert smbfs	18 years ago
dir.c	[PATCH] mark struct inode_operations const 3	18 years ago
file.c	[PATCH] mark struct inode_operations const 3	18 years ago
getopt.c	…
getopt.h	…
inode.c	[PATCH] Mark struct super_operations const	18 years ago
ioctl.c	…
proc.c	[PATCH] smbfs: Make conn_pid a struct pid	18 years ago
proto.h	[PATCH] mark struct inode_operations const 3	18 years ago
request.c	[PATCH] smbfs: double free memory corruption	18 years ago
request.h	…
smb_debug.h	…
smbiod.c	[PATCH] smbfs: Make conn_pid a struct pid	18 years ago
sock.c	[PATCH] struct path: convert smbfs	18 years ago
symlink.c	[PATCH] remove many unneeded #includes of sched.h	18 years ago