freebsd-skq/sys/dev/iscsi_initiator
ngie 73cdda036c MFC r298669:
r298669 (by cem):

iscsi_initiator(4): Fix use-after-free, double-free

ism_stop() already destroys and frees 'sp', including a call to ic_destroy().
Don't dereference 'sp' after ism_stop() and don't invoke ic_destroy() on the
freed memory either.

CIDs:		1006109, 1304861
2016-05-13 08:36:33 +00:00
..
2016-05-13 08:36:33 +00:00