Commit b64dc04b authored by Jamie Iles's avatar Jamie Iles Committed by Herbert Xu

crypto: picoxcell - fix possible invalid pointer dereference

The completion callback will free the request so we must remove it from
the completion list before calling the callback.

Cc: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarJamie Iles <jamie@jamieiles.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent 30343ef1
...@@ -1242,8 +1242,8 @@ static void spacc_spacc_complete(unsigned long data) ...@@ -1242,8 +1242,8 @@ static void spacc_spacc_complete(unsigned long data)
spin_unlock_irqrestore(&engine->hw_lock, flags); spin_unlock_irqrestore(&engine->hw_lock, flags);
list_for_each_entry_safe(req, tmp, &completed, list) { list_for_each_entry_safe(req, tmp, &completed, list) {
req->complete(req);
list_del(&req->list); list_del(&req->list);
req->complete(req);
} }
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment