From: Lothar Waßmann <LW@KARO-electronics.de>
Date: Tue, 14 Jul 2009 23:10:21 +0000 (+0000)
Subject: net/can bugfix: use after free bug in can protocol drivers
X-Git-Tag: v2.6.31-rc4~11^2~34
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f7e5cc0c40dff92bad2894153f675c6c542ba2f0;p=pandora-kernel.git

net/can bugfix: use after free bug in can protocol drivers

Fix a use after free bug in can protocol drivers

The release functions of the can protocol drivers lack a call to
sock_orphan() which leads to referencing freed memory under certain
circumstances.

This patch fixes a bug reported here:
https://lists.berlios.de/pipermail/socketcan-users/2009-July/000985.html

Signed-off-by: Lothar Wassmann <LW@KARO-electronics.de>
Acked-by: Oliver Hartkopp <oliver@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed