Mirrors_Framework/nuttx
1
0
Fork 0
mirror of https://github.com/apache/nuttx.git synced 2026-06-06 00:14:22 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FAT: fat_unbind() was accessing 'fs->fs_sem' after freeing the 'fs' struct. From Juha Niskanen.

Browse Source
This commit is contained in:
Gregory Nutt
2015-03-11 13:11:50 -06:00
parent 1a68ee6824
commit d36d7a959d
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fs/fat/fs_fat32.c
+4 -2
View File
@@ -1763,8 +1763,8 @@ static int fat_bind(FAR struct inode *blkdriver, const void *data,
} }
/* Initialize the allocated mountpt state structure. The filesystem is /* Initialize the allocated mountpt state structure. The filesystem is
* responsible for one reference ont the blkdriver inode and does not * responsible for one reference on the blkdriver inode and does not
* have to addref() here (but does have to release in ubind(). * have to addref() here (but does have to release in unbind().
*/ */
fs->fs_blkdriver = blkdriver; /* Save the block driver reference */ fs->fs_blkdriver = blkdriver; /* Save the block driver reference */
@@ -1849,7 +1849,9 @@ static int fat_unbind(void *handle, FAR struct inode **blkdriver)
fat_io_free(fs->fs_buffer, fs->fs_hwsectorsize); fat_io_free(fs->fs_buffer, fs->fs_hwsectorsize);
} }
sem_destroy(&fs->fs_sem);
kmm_free(fs); kmm_free(fs);
return ret;
} }
fat_semgive(fs); fat_semgive(fs);