linux-stable/drivers/tee/optee
Sumit Garg ad338d825e tee: optee: Fix incorrect page free bug
commit 18549bf4b2 upstream.

Pointer to the allocated pages (struct page *page) has already
progressed towards the end of allocation. It is incorrect to perform
__free_pages(page, order) using this pointer as we would free any
arbitrary pages. Fix this by stop modifying the page pointer.

Fixes: ec185dd3ab ("optee: Fix memory leak when failing to register shm pages")
Cc: stable@vger.kernel.org
Reported-by: Patrik Lantz <patrik.lantz@axis.com>
Signed-off-by: Sumit Garg <sumit.garg@linaro.org>
Reviewed-by: Tyler Hicks <tyhicks@linux.microsoft.com>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-12-29 12:26:05 +01:00
..
call.c tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag 2021-08-15 14:00:24 +02:00
core.c tee: optee: Fix missing devices unregister during optee_remove 2021-10-20 11:45:02 +02:00
device.c tee: optee: Fix missing devices unregister during optee_remove 2021-10-20 11:45:02 +02:00
Kconfig
Makefile
optee_msg.h optee: use export_uuid() to copy client UUID 2021-06-10 13:39:21 +02:00
optee_private.h tee: optee: Fix missing devices unregister during optee_remove 2021-10-20 11:45:02 +02:00
optee_smc.h driver: tee: Handle NULL pointer indication from client 2020-08-21 08:55:13 +02:00
rpc.c tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag 2021-08-15 14:00:24 +02:00
shm_pool.c tee: optee: Fix incorrect page free bug 2021-12-29 12:26:05 +01:00
shm_pool.h
supp.c