From: Sebastian Ott <sebott@linux.vnet.ibm.com>
Date: Fri, 11 Sep 2009 08:28:23 +0000 (+0200)
Subject: [S390] cio: fix use after free in s390 debug feature
X-Git-Tag: v2.6.32-rc1~734^2~44
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f014824ee72e66292c3b1172dc142f959b42e61b;p=pandora-kernel.git

[S390] cio: fix use after free in s390 debug feature

When using s390dbf with "%s" in sprintf format strings the string itself
is not copied to the dbf buffer.
Since in this case only pointers are stored in the s390dbf, we should
not use dev_name - which is bound to the lifetime of the device.
Reading this entry from s390dbf after the device was released will cause
an use after free error.

Signed-off-by: Sebastian Ott <sebott@linux.vnet.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
---

Reading git-diff-tree failed