Return-path: Received: from aserp1040.oracle.com ([141.146.126.69]:44527 "EHLO aserp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1762275AbdDSLrs (ORCPT ); Wed, 19 Apr 2017 07:47:48 -0400 Date: Wed, 19 Apr 2017 14:47:34 +0300 From: Dan Carpenter To: Samuel Ortiz Cc: Vincent Cuissard , linux-wireless@vger.kernel.org, kernel-janitors@vger.kernel.org Subject: Re: [PATCH] NFC: nfcmrvl: double free on error path Message-ID: <20170419113354.6j7co2yuusdqsubl@mwanda> (sfid-20170419_134823_231195_EB27F482) References: <20170308052237.GA14542@mwanda> <20170401221117.GD22034@zurbaran.ger.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: <20170401221117.GD22034@zurbaran.ger.intel.com> Sender: linux-wireless-owner@vger.kernel.org List-ID: On Sun, Apr 02, 2017 at 12:11:17AM +0200, Samuel Ortiz wrote: > Hi Dan, > > On Wed, Mar 08, 2017 at 08:22:37AM +0300, Dan Carpenter wrote: > > The nci_spi_send() function calls kfree_skb(skb) on both error and > > success so this extra kfree_skb() is a double free. > > > > Fixes: caf6e49bf6d0 ("NFC: nfcmrvl: add spi driver") > > Signed-off-by: Dan Carpenter > > --- > > Static analysis. Not tested. > Applied to nfc-next, thanks. > This is still not showing up in linux-next. regards, dan carpenter