Commit 06b35d00 authored by Dan Carpenter's avatar Dan Carpenter Committed by Konrad Rzeszutek Wilk
Browse files

xen/evtchn: double free on error 



The call to del_evtchn() frees "evtchn".

Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>
parent a5deabe0

drivers/xen/evtchn.c

+0 −1
Original line number Diff line number Diff line
@@ -319,7 +319,6 @@ static int evtchn_bind_to_user(struct per_user_data *u, int port) 
	if (HYPERVISOR_event_channel_op(EVTCHNOP_close, &close) != 0)

		BUG();

	del_evtchn(u, evtchn);

	kfree(evtchn);

	return rc;

}