diff options
author | Herbert Xu <herbert@gondor.apana.org.au> | 2007-05-19 14:57:38 +1000 |
---|---|---|
committer | Chris Wright <chrisw@sous-sol.org> | 2007-05-23 14:32:55 -0700 |
commit | 3dc006dd27bdbe69ee0069cfd037c9e7ca2dc86f (patch) | |
tree | c7c2baf9540f74fb8360fff0a72da0fa5c436018 | |
parent | ca5cf888be6e9261cdcf0b0de30c7237aa87f366 (diff) |
[PATCH] CRYPTO: api: Read module pointer before freeing algorithm
The function crypto_mod_put first frees the algorithm and then drops
the reference to its module. Unfortunately we read the module pointer
which after freeing the algorithm and that pointer sits inside the
object that we just freed.
So this patch reads the module pointer out before we free the object.
Thanks to Luca Tettamanti for reporting this.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
-rw-r--r-- | crypto/api.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/crypto/api.c b/crypto/api.c index 55af8bb0f050..33734fd9198f 100644 --- a/crypto/api.c +++ b/crypto/api.c @@ -48,8 +48,10 @@ EXPORT_SYMBOL_GPL(crypto_mod_get); void crypto_mod_put(struct crypto_alg *alg) { + struct module *module = alg->cra_module; + crypto_alg_put(alg); - module_put(alg->cra_module); + module_put(module); } EXPORT_SYMBOL_GPL(crypto_mod_put); |