From: Sebastian Ott <sebott@linux.vnet.ibm.com>
Date: Mon, 25 Oct 2010 14:10:46 +0000 (+0200)
Subject: [S390] dasd: fix use after free in dbf
X-Git-Tag: v2.6.37-rc1~125^2~8
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=26cffecf84c8cb33787dd13a72bd2124d107d413;p=pandora-kernel.git

[S390] dasd: fix use after free in dbf

Writing to /proc/dasd/statistics while the debug level of the
generic dasd debug entry is set to DBF_DEBUG will lead to an
use after free when accessing the debug entry later.
Since for the format string "%s" in the s390 dbf only a pointer
to the string is stored in the debug feature and the buffer used
here is freed afterwards.

To fix this just remove the debug message.

Signed-off-by: Sebastian Ott <sebott@linux.vnet.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
---

Reading git-diff-tree failed