mlx5: use after free in mlx5_cmd_comp_handler()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 22 Jul 2013 08:02:01 +0000 (11:02 +0300)
committerDavid S. Miller <davem@davemloft.net>
Wed, 24 Jul 2013 22:44:51 +0000 (15:44 -0700)
commit64d2c22a4cdd3ce752ca700964a6120049d78aed
tree410759eb9531acd078d11ae2b8c554eb3f617873
parent4ea72445bddd2ca09fc719065fc3c5a8bfc8ca10
mlx5: use after free in mlx5_cmd_comp_handler()

We can't dereference "ent" after passing it to free_cmd().

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ethernet/mellanox/mlx5/core/cmd.c