mmc: sh_mmcif: fix use after free
authorGuennadi Liakhovetski <g.liakhovetski@gmx.de>
Tue, 23 Oct 2012 12:08:52 +0000 (14:08 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Nov 2012 21:19:05 +0000 (13:19 -0800)
commit2d2db636c0f85a0fa4da6b6bc82d3474745b10de
tree75115a000a72d334ea077dda5a826c5d66669a5f
parentf98f5bfb851481d11b7395a9a2cd62ccdcf79d13
mmc: sh_mmcif: fix use after free

commit a0d28ba01ebd048b4ba418142b37f5cf80e6d156 upstream.

A recent commit "mmc: sh_mmcif: fix clock management" has introduced a
use after free bug in sh_mmcif.c: in sh_mmcif_remove() the call to
mmc_free_host() frees private driver data, therefore using it afterwards
is a bug. Revert that hunk.

Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
Signed-off-by: Chris Ball <cjb@laptop.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/mmc/host/sh_mmcif.c