From owner-svn-src-head@FreeBSD.ORG Sat Jun 5 08:44:40 2010 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5D1661065674; Sat, 5 Jun 2010 08:44:40 +0000 (UTC) (envelope-from mav@FreeBSD.org) Received: from svn.freebsd.org (unknown [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 4D2A48FC1A; Sat, 5 Jun 2010 08:44:40 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id o558iefH068053; Sat, 5 Jun 2010 08:44:40 GMT (envelope-from mav@svn.freebsd.org) Received: (from mav@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id o558iepw068051; Sat, 5 Jun 2010 08:44:40 GMT (envelope-from mav@svn.freebsd.org) Message-Id: <201006050844.o558iepw068051@svn.freebsd.org> From: Alexander Motin Date: Sat, 5 Jun 2010 08:44:40 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org X-SVN-Group: head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r208820 - head/sys/dev/ata/chipsets X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Jun 2010 08:44:40 -0000 Author: mav Date: Sat Jun 5 08:44:40 2010 New Revision: 208820 URL: http://svn.freebsd.org/changeset/base/208820 Log: Fix use after free on error. Found with: Coverity Prevent(tm) CID: 4722 Modified: head/sys/dev/ata/chipsets/ata-acerlabs.c Modified: head/sys/dev/ata/chipsets/ata-acerlabs.c ============================================================================== --- head/sys/dev/ata/chipsets/ata-acerlabs.c Sat Jun 5 08:36:37 2010 (r208819) +++ head/sys/dev/ata/chipsets/ata-acerlabs.c Sat Jun 5 08:44:40 2010 (r208820) @@ -133,6 +133,7 @@ ata_ali_chipinit(device_t dev) bus_release_resource(dev, SYS_RES_IOPORT, PCIR_BAR(i), res->bars[i]); free(res, M_TEMP); + return ENXIO; } } ctlr->chipset_data = res;