tree 640513697af29776e9050eaecef69d10e5145abd
parent cbc0238c26e7a18eff2892ab9a24fa8eed5dc333
author David S. Miller <davem@davemloft.net> 1297316916 -0800
committer Greg Kroah-Hartman <gregkh@suse.de> 1299077227 -0500

x25: Do not reference freed memory.

commit 96642d42f076101ba98866363d908cab706d156c upstream.

In x25_link_free(), we destroy 'nb' before dereferencing
'nb->dev'.  Don't do this, because 'nb' might be freed
by then.

Reported-by: Randy Dunlap <randy.dunlap@oracle.com>
Tested-by: Randy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>