Messages in this thread Patch in this message | | | Date | Sat, 20 Mar 2010 14:24:48 +0300 | From | Dan Carpenter <> | Subject | [patch 3/3] btrfs: dereferencing freed memory |
| |
The original code dereferenced range on the next line.
Signed-off-by: Dan Carpenter <error27@gmail.com>
diff --git a/fs/btrfs/ioctl.c b/fs/btrfs/ioctl.c index be9b5df..d7ab56c 100644 --- a/fs/btrfs/ioctl.c +++ b/fs/btrfs/ioctl.c @@ -1378,6 +1378,7 @@ static int btrfs_ioctl_defrag(struct file *file, void __user *argp) sizeof(*range))) { ret = -EFAULT; kfree(range); + goto out; } /* compression requires us to start the IO */ if ((range->flags & BTRFS_DEFRAG_RANGE_COMPRESS)) {
| |