Brainy: UAF in iscsi_ioctl.c

[Maxime Villard <max%m00nbsd.net@localhost>]

Hi,
in sys/dev/iscsi/iscsi_ioctl.c:

1542		free(sess, M_DEVBUF);
1543
1544		DEB(1, ("Cleanup: session ended %d\n", sess->id));

I guess inverting the two instructions fixes the bug.

Found by Brainy.

Maxime