upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-04-15 14:29:58 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix use-after-free for DMA tag. Destroy DMA tag later.

Browse source 
Submitted by:	Yuriy Tsibizov
This commit is contained in:
Ariff Abdullah 2007-05-04 12:38:46 +00:00
parent 7a92401aea
commit 53bc1d83c0
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
sys/dev/sound/pci/emu10kx.c
View file

@ -2614,9 +2614,6 @@ emu_uninit(struct emu_sc_info *sc)
emu_wrptr(sc, 0, SOLEL, 0);
emu_wrptr(sc, 0, SOLEH, 0);
if (sc->mem.dmat)
bus_dma_tag_destroy(sc->mem.dmat);
if (!SLIST_EMPTY(&sc->mem.blocks))
device_printf(sc->dev, "warning: memblock list not empty\n");
@ -3103,6 +3100,10 @@ emu_pci_detach(device_t dev)
if (r)
return (r);
emu_rm_uninit(sc);
if (sc->mem.dmat)
bus_dma_tag_destroy(sc->mem.dmat);
if (sc->reg)
bus_release_resource(dev, SYS_RES_IOPORT, PCIR_BAR(0), sc->reg);
bus_teardown_intr(dev, sc->irq, sc->ih);