[src/netbsd-7]: src/sys/arch/pmax/tc Pull up following revision(s) (requested...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/3b3d1048c24f
branches:  netbsd-7
changeset: 799458:3b3d1048c24f
user:      snj <snj%NetBSD.org@localhost>
date:      Sun Jul 05 20:32:56 2015 +0000

description:
Pull up following revision(s) (requested by maxv in ticket #856):
        sys/arch/pmax/tc/dt.c: revision 1.12
Use-after-free.
ok christos@
Found by The Brainy Code Scanner.

diffstat:

 sys/arch/pmax/tc/dt.c |  5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diffs (26 lines):

diff -r 2685743778bf -r 3b3d1048c24f sys/arch/pmax/tc/dt.c
--- a/sys/arch/pmax/tc/dt.c     Sun Jul 05 20:27:41 2015 +0000
+++ b/sys/arch/pmax/tc/dt.c     Sun Jul 05 20:32:56 2015 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: dt.c,v 1.11 2011/06/04 01:37:36 tsutsui Exp $  */
+/*     $NetBSD: dt.c,v 1.11.28.1 2015/07/05 20:32:56 snj Exp $ */
 
 /*-
  * Copyright (c) 2002, 2003 The NetBSD Foundation, Inc.
@@ -133,7 +133,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: dt.c,v 1.11 2011/06/04 01:37:36 tsutsui Exp $");
+__KERNEL_RCSID(0, "$NetBSD: dt.c,v 1.11.28.1 2015/07/05 20:32:56 snj Exp $");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -225,6 +225,7 @@
        if (sc->sc_sih == NULL) {
                printf("%s: memory exhausted\n", device_xname(self));
                free(msg, M_DEVBUF);
+               return;
        }
 
        SIMPLEQ_INIT(&sc->sc_queue);