Home Home > GIT Browse > SLE15-SP1
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTakashi Iwai <tiwai@suse.de>2019-05-17 16:59:18 +0200
committerTakashi Iwai <tiwai@suse.de>2019-05-17 16:59:28 +0200
commit8c33ab8f4cea28607f0c9e4aad7f42a1d68f4e2f (patch)
treebbe4bf1e520884665482ecf89b5f223f64716997
parent43e4f8c7b16778ae8a9374236b7e5b71f2c67f9e (diff)
ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
-rw-r--r--drivers/char/ipmi/ipmi_msghandler.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/char/ipmi/ipmi_msghandler.c b/drivers/char/ipmi/ipmi_msghandler.c
index c052d457d2db..fb16514980d9 100644
--- a/drivers/char/ipmi/ipmi_msghandler.c
+++ b/drivers/char/ipmi/ipmi_msghandler.c
@@ -904,7 +904,7 @@ static int deliver_response(struct ipmi_smi *intf, struct ipmi_recv_msg *msg)
if (user) {
user->handler->ipmi_recv_hndl(msg, user->handler_data);
- release_ipmi_user(msg->user, index);
+ release_ipmi_user(user, index);
} else {
/* User went away, give up. */
ipmi_free_recv_msg(msg);