diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2013-06-21 10:20:08 +0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-06-24 11:24:57 +0400 |
| commit | 07cc61bfc0e5d9da80e353365717d45d29db0081 (patch) | |
| tree | 606f08336dcb4776501f70a03c97857b22d76eca /drivers/net/xen-netback | |
| parent | 5243b6ac9ed1310f2329b3d0a830a55589e518ea (diff) | |
| download | linux-07cc61bfc0e5d9da80e353365717d45d29db0081.tar.xz | |
xen-netback: double free on unload
There is a typo here, "i" vs "j", so we would crash on module_exit().
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/xen-netback')
| -rw-r--r-- | drivers/net/xen-netback/netback.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/net/xen-netback/netback.c b/drivers/net/xen-netback/netback.c index a0b50ad2ef31..130bcb217d2c 100644 --- a/drivers/net/xen-netback/netback.c +++ b/drivers/net/xen-netback/netback.c @@ -1968,8 +1968,8 @@ static void __exit netback_fini(void) del_timer_sync(&netbk->net_timer); kthread_stop(netbk->task); for (j = 0; j < MAX_PENDING_REQS; j++) { - if (netbk->mmap_pages[i]) - __free_page(netbk->mmap_pages[i]); + if (netbk->mmap_pages[j]) + __free_page(netbk->mmap_pages[j]); } } |