| From c08138f57dc37880110c91afcb7403f3d7a8aa3c Mon Sep 17 00:00:00 2001 | 
 | From: Dan Carpenter <dan.carpenter@oracle.com> | 
 | Date: Tue, 19 Jun 2012 08:52:33 -0500 | 
 | Subject: libceph: fix NULL dereference in reset_connection() | 
 |  | 
 | From: Dan Carpenter <dan.carpenter@oracle.com> | 
 |  | 
 | (cherry picked from commit 26ce171915f348abd1f41da1ed139d93750d987f) | 
 |  | 
 | We dereference "con->in_msg" on the line after it was set to NULL. | 
 |  | 
 | Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> | 
 | Reviewed-by: Alex Elder <elder@inktank.com> | 
 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 
 | --- | 
 |  net/ceph/messenger.c |    2 +- | 
 |  1 file changed, 1 insertion(+), 1 deletion(-) | 
 |  | 
 | --- a/net/ceph/messenger.c | 
 | +++ b/net/ceph/messenger.c | 
 | @@ -440,7 +440,7 @@ static void reset_connection(struct ceph | 
 |  		con->in_msg->con = NULL; | 
 |  		ceph_msg_put(con->in_msg); | 
 |  		con->in_msg = NULL; | 
 | -		ceph_con_put(con->in_msg->con); | 
 | +		ceph_con_put(con); | 
 |  	} | 
 |   | 
 |  	con->connect_seq = 0; |