xen/evtchn: double free on error
The call to del_evtchn() frees "evtchn". Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
This commit is contained in:
parent
a5deabe0e6
commit
06b35d0072
@ -319,7 +319,6 @@ err:
|
|||||||
if (HYPERVISOR_event_channel_op(EVTCHNOP_close, &close) != 0)
|
if (HYPERVISOR_event_channel_op(EVTCHNOP_close, &close) != 0)
|
||||||
BUG();
|
BUG();
|
||||||
del_evtchn(u, evtchn);
|
del_evtchn(u, evtchn);
|
||||||
kfree(evtchn);
|
|
||||||
return rc;
|
return rc;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user