Messages in this thread | | | Subject | Re: [PATCH 3.2.y 3.3.y] staging:rts_pstor:Fix possible panic by NULL pointer dereference | From | Ben Hutchings <> | Date | Fri, 22 Jun 2012 04:53:29 +0100 |
| |
On Thu, 2012-06-21 at 16:18 +0800, Keng-Yu Lin wrote: > From: wwang <wei_wang@realsil.com.cn> > > commit 0d05568ac79bfc595f1eadc3e0fd7a20a45f7b69 upstream. > > rtsx_transport.c (rtsx_transfer_sglist_adma_partial): > pointer struct scatterlist *sg, which is mapped in dma_map_sg, > is used as an iterator in later transfer operation. It is corrupted and > passed to dma_unmap_sg, thus causing fatal unmap of some erroneous address. > Fix it by duplicating *sg_ptr for iterating. [...]
Added to the queue for 3.2, thanks.
Ben.
-- Ben Hutchings Every program is either trivial or else contains at least one bug [unhandled content-type:application/pgp-signature] | |