Subject: Re: Dereferencing freed memory bugs

From: Marcin Slusarz <[email-masked]>
Date: Sat, 28 Mar 2009 19:18:46 +0100

Dan Carpenter pisze:
> I added a check to smatch (http://repo.or.cz/w/smatch.git/) to check
> for when we dereference
> freed memory.
> 
> (...)
> net/netfilter/nfnetlink_log.c +341 __nfulnl_flush(5) 'inst'
> (...)

I think it's a false positive. In __nfulnl_flush we expect that caller
already holds a reference to inst and it looks like all callers do it.

Marcin