[SCSI] dpt_i2o: several use after free issues
authorDan Carpenter <error27@gmail.com>
Mon, 15 Mar 2010 08:26:56 +0000 (11:26 +0300)
committerJames Bottomley <James.Bottomley@suse.de>
Thu, 8 Apr 2010 22:26:15 +0000 (18:26 -0400)
adpt_i2o_delete_hba() calls kfree() so we have to save "pHba->next"
before calling it.  Also inside adpt_i2o_delete_hba() itself, there
was another use after free bug which I fixed by moving the kfree()
down a line.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>

No differences found