mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-10-03 23:58:05 +00:00
mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
[ Upstream commitf0e82242b1
] kfree(dev) has been called inside put_device so anther kfree would cause a use-after-free bug/ Fixes:8286ae0330
("MIPS: Add CDMM bus support") Reported-by: Hulk Robot <hulkci@huawei.com> Signed-off-by: Qinglang Miao <miaoqinglang@huawei.com> Acked-by: Serge Semin <fancer.lancer@gmail.com> Signed-off-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de> Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
parent
a3234493ef
commit
40306ef7a2
1 changed files with 1 additions and 3 deletions
|
@ -544,10 +544,8 @@ static void mips_cdmm_bus_discover(struct mips_cdmm_bus *bus)
|
||||||
dev_set_name(&dev->dev, "cdmm%u-%u", cpu, id);
|
dev_set_name(&dev->dev, "cdmm%u-%u", cpu, id);
|
||||||
++id;
|
++id;
|
||||||
ret = device_register(&dev->dev);
|
ret = device_register(&dev->dev);
|
||||||
if (ret) {
|
if (ret)
|
||||||
put_device(&dev->dev);
|
put_device(&dev->dev);
|
||||||
kfree(dev);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue