diff options
| author | Ram Kishore Vegesna <ram@FreeBSD.org> | 2021-05-28 05:26:13 +0000 |
|---|---|---|
| committer | Ram Kishore Vegesna <ram@FreeBSD.org> | 2021-05-28 05:26:13 +0000 |
| commit | dd722ccd6efcaed5c6056e51a044db7f1a5b4a0d (patch) | |
| tree | cd0694980265c3b9b1160e095b88913a75b87b8d | |
| parent | 96b40b896772bbce5f93d62eaa640e1eb51b4a30 (diff) | |
ocs_fc: Fix a use after free in ocs_sport_free
Domain which could be freed is used while freeing the sport.
Use ocs from sport.
PR: 255866
Reported by: lylgood@foxmail.com
Approved by:: markj
| -rw-r--r-- | sys/dev/ocs_fc/ocs_sport.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/dev/ocs_fc/ocs_sport.c b/sys/dev/ocs_fc/ocs_sport.c index 71fe350311f7..7df31b1448f1 100644 --- a/sys/dev/ocs_fc/ocs_sport.c +++ b/sys/dev/ocs_fc/ocs_sport.c @@ -263,7 +263,7 @@ ocs_sport_free(ocs_sport_t *sport) ocs_lock_free(&sport->node_group_lock); ocs_scsi_sport_deleted(sport); - ocs_free(domain->ocs, sport, sizeof(*sport)); + ocs_free(sport->ocs, sport, sizeof(*sport)); } } |