#
299621 |
|
13-May-2016 |
ngie |
MFC r298669: r298669 (by cem):
iscsi_initiator(4): Fix use-after-free, double-free
ism_stop() already destroys and frees 'sp', including a call to ic_destroy(). Don't dereference 'sp' after ism_stop() and don't invoke ic_destroy() on the freed memory either.
CIDs: 1006109, 1304861
|