lkml.org 
[lkml]   [2012]   [Jun]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH 3.2.y 3.3.y] staging:rts_pstor:Fix possible panic by NULL pointer dereference
From
Date
On Thu, 2012-06-21 at 16:18 +0800, Keng-Yu Lin wrote:
> From: wwang <wei_wang@realsil.com.cn>
>
> commit 0d05568ac79bfc595f1eadc3e0fd7a20a45f7b69 upstream.
>
> rtsx_transport.c (rtsx_transfer_sglist_adma_partial):
> pointer struct scatterlist *sg, which is mapped in dma_map_sg,
> is used as an iterator in later transfer operation. It is corrupted and
> passed to dma_unmap_sg, thus causing fatal unmap of some erroneous address.
> Fix it by duplicating *sg_ptr for iterating.
[...]

Added to the queue for 3.2, thanks.

Ben.

--
Ben Hutchings
Every program is either trivial or else contains at least one bug
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2012-06-22 06:41    [W:0.032 / U:0.252 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site