xen/evtchn: double free on error
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 26 Aug 2013 16:18:17 +0000 (19:18 +0300)
committerKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Fri, 30 Aug 2013 12:44:53 +0000 (08:44 -0400)
The call to del_evtchn() frees "evtchn".

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
drivers/xen/evtchn.c

index f328f121c92d261aeca13708f6763148298fb7c5..8b3a69a06c39d3c485721d13e58e436af024d99b 100644 (file)
@@ -319,7 +319,6 @@ err:
        if (HYPERVISOR_event_channel_op(EVTCHNOP_close, &close) != 0)
                BUG();
        del_evtchn(u, evtchn);
-       kfree(evtchn);
        return rc;
 }