ide: fix barriers support

Freeing non-slab objects is bad and results in an oops. Fix it.

Reported-and-tested-by: Andrew Price <[e-mail]>
Cc: Theodore Tso <[e-mail]>
Cc: "Rafael J. Wysocki" <[e-mail]>
Signed-off-by: Bartlomiej Zolnierkiewicz <[e-mail]>

drivers/ide/ide-io.c

···
 			drive->dev_flags |= IDE_DFLAG_PARKED;
 	}
 
-	if (rq && rq->cmd_type == REQ_TYPE_ATA_TASKFILE)
-		memcpy(rq->special, cmd, sizeof(*cmd));
+	if (rq && rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
+		struct ide_cmd *orig_cmd = rq->special;
 
-	if (cmd->tf_flags & IDE_TFLAG_DYN)
-		kfree(cmd);
+		if (cmd->tf_flags & IDE_TFLAG_DYN)
+			kfree(orig_cmd);
+		else
+			memcpy(orig_cmd, cmd, sizeof(*cmd));
+	}
 }
 
 /* obsolete, blk_rq_bytes() should be used instead */