projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a392b3) | patch
driver: uio: fix possible use-after-free in __uio_register_device
authorLiu Jian <liujian56@huawei.com>
Tue, 22 Jan 2019 22:45:38 +0000 (06:45 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 31 Jan 2019 15:36:52 +0000 (16:36 +0100)
commit221a1f4ac12d2ab46246c160b2e00d1b1160d5d9
treed2f2662d31635d9cc9f999fb48f4a27e93d21879tree | snapshot
parent1a392b3de7c5747506b38fc14b2e79977d3c7770commit | diff
driver: uio: fix possible use-after-free in __uio_register_device

In uio_dev_add_attributes() error handing case, idev is used after
device_unregister(), in which 'idev' has been released, touch idev cause
use-after-free.

Fixes: a93e7b331568 ("uio: Prevent device destruction while fds are open")
Signed-off-by: Liu Jian <liujian56@huawei.com>
Reviewed-by: Hamish Martin <hamish.martin@alliedtelesis.co.nz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/uio/uio.c diff | blob | history
John Crispins staging tree