| commit | fffc151381473384629d78cb89b7f7bbb9dc53b0 | [log] [tgz] |
|---|---|---|
| author | Johan Hovold <johan@hovoldconsulting.com> | Tue Jul 14 15:43:23 2015 +0200 |
| committer | Greg Kroah-Hartman <gregkh@google.com> | Wed Jul 15 12:39:13 2015 -0700 |
| tree | ff872a539ca01725fb5eed5c368a214c3ad213b7 | |
| parent | a5192032a2a9475c837c2b4b6fc3df02d617c7b0 [diff] |
greybus: operation: fix another cancellation use-after-free An incoming operation could already be scheduled even if gb_operation_result_set succeeds as its initial status is -EINPROGRESS. Avoid potential use-after-free by never dropping the reference count for incoming operations as part of cancellation. Signed-off-by: Johan Hovold <johan@hovoldconsulting.com> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>