CPUFREQ: Fix use after free of struct powernow_k8_data
authorThomas Renninger <trenn@suse.de>
Mon, 14 Dec 2009 10:44:15 +0000 (11:44 +0100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 23 Feb 2010 15:37:49 +0000 (07:37 -0800)
commit344542028e96bd2c105ea5da4330af90db94e2b7
tree118913938fe2f0fd7f91110c2bfb3b8cb5b21c40
parent65798849d8abac3b382f6d3c2ef6a3722657cd19
CPUFREQ: Fix use after free of struct powernow_k8_data

commit 557a701c16553b0b691dbb64ef30361115a80f64 upstream.

Easy fix for a regression introduced in 2.6.31.

On managed CPUs the cpufreq.c core will call driver->exit(cpu) on the
managed cpus and powernow_k8 will free the core's data.

Later driver->get(cpu) function might get called trying to read out the
current freq of a managed cpu and the NULL pointer check does not work on
the freed object -> better set it to NULL.

->get() is unsigned and must return 0 as invalid frequency.

Reference:
http://bugzilla.kernel.org/show_bug.cgi?id=14391

Signed-off-by: Thomas Renninger <trenn@suse.de>
Tested-by: Michal Schmidt <mschmidt@redhat.com>
Signed-off-by: Dave Jones <davej@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
arch/x86/kernel/cpu/cpufreq/powernow-k8.c