Jan Beulich
2010-Mar-01 09:17 UTC
[Xen-devel] [PATCH] Linux: blktap2: Fwd: Fix wild ptr deref during device destruction.
A put_disk() before blk_cleanup_queue() would free gd before gd->queue is read. Signed-off-by: Daniel Stodden <daniel.stodden@citrix.com> Signed-off-by: Jan Beulich <jbeulich@novell.com> --- a/drivers/xen/blktap2/device.c +++ b/drivers/xen/blktap2/device.c @@ -1077,8 +1077,8 @@ #endif del_gendisk(dev->gd); + blk_cleanup_queue(dev->gd->queue); put_disk(dev->gd); - blk_cleanup_queue(dev->gd->queue); dev->gd = NULL; _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel