No description
Find a file
Sukrut Bellary bfc1704d90 misc: fastrpc: Fix double free of 'buf' in error path
commit e8c276d4dc upstream.

smatch warning:
drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf'

In fastrpc_req_mmap() error path, the fastrpc buffer is freed in
fastrpc_req_munmap_impl() if unmap is successful.

But in the end, there is an unconditional call to fastrpc_buf_free().
So the above case triggers the double free of fastrpc buf.

Fixes: 72fa6f7820 ("misc: fastrpc: Rework fastrpc_req_munmap")
Reviewed-by: Shuah Khan <skhan@linuxfoundation.org>
Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
Signed-off-by: Sukrut Bellary <sukrut.bellary@linux.com>
Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
Cc: stable <stable@kernel.org>
Link: https://lore.kernel.org/r/20240902141409.70371-2-srinivas.kandagatla@linaro.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-09-12 11:13:07 +02:00
arch MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed 2024-09-12 11:13:05 +02:00
block block: don't call bio_uninit from bio_endio 2024-09-12 11:12:59 +02:00
certs kbuild: use $(src) instead of $(srctree)/$(src) for source directory 2024-05-10 04:34:52 +09:00
crypto crypto: ecc - Fix off-by-one missing to clear most significant digit 2024-09-08 07:56:40 +02:00
Documentation cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition 2024-09-12 11:12:50 +02:00
drivers misc: fastrpc: Fix double free of 'buf' in error path 2024-09-12 11:13:07 +02:00
fs fs: only copy to userspace on success in listmount() 2024-09-12 11:13:05 +02:00
include bpf, net: Fix a potential race in do_sock_getsockopt() 2024-09-12 11:12:57 +02:00
init rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT 2024-08-29 17:35:52 +02:00
io_uring io_uring/kbuf: return correct iovec count from classic buffer peek 2024-09-04 13:30:11 +02:00
ipc Mainly singleton patches, documented in their respective changelogs. 2024-05-19 14:02:03 -07:00
kernel smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() 2024-09-12 11:13:02 +02:00
lib kunit/overflow: Fix UB in overflow_allocation_test 2024-09-12 11:13:05 +02:00
LICENSES LICENSES: Add the copyleft-next-0.3.1 license 2022-11-08 15:44:01 +01:00
mm userfaultfd: fix checks for huge PMDs 2024-09-12 11:12:47 +02:00
net tcp: process the 3rd ACK with sk_socket for TFO/MPTCP 2024-09-12 11:13:06 +02:00
rust rust: kbuild: fix export of bss symbols 2024-09-12 11:12:55 +02:00
samples tracing/treewide: Remove second parameter of __assign_str() 2024-05-22 20:14:47 -04:00
scripts scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum 2024-09-12 11:12:56 +02:00
security smack: unix sockets: fix accept()ed socket label 2024-09-12 11:12:50 +02:00
sound ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment 2024-09-12 11:13:00 +02:00
tools kselftests: dmabuf-heaps: Ensure the driver name is null-terminated 2024-09-12 11:13:04 +02:00
usr kbuild: use $(src) instead of $(srctree)/$(src) for source directory 2024-05-10 04:34:52 +09:00
virt KVM fixes for 6.10 2024-06-21 08:03:55 -04:00
.clang-format clang-format: Update with v6.7-rc4's for_each macro list 2023-12-08 23:54:38 +01:00
.cocciconfig
.editorconfig .editorconfig: remove trim_trailing_whitespace option 2024-06-13 16:47:52 +02:00
.get_maintainer.ignore Add Jeff Kirsher to .get_maintainer.ignore 2024-03-08 11:36:54 +00:00
.gitattributes .gitattributes: set diff driver for Rust source code files 2023-05-31 17:48:25 +02:00
.gitignore kbuild: create a list of all built DTB files 2024-02-19 18:20:39 +09:00
.mailmap MAINTAINERS: mailmap: update Lorenzo Stoakes's email address 2024-07-06 11:39:51 -07:00
.rustfmt.toml rust: add .rustfmt.toml 2022-09-28 09:02:20 +02:00
COPYING
CREDITS pci-v6.10-fixes-2 2024-07-05 12:33:00 -07:00
Kbuild Kbuild updates for v6.1 2022-10-10 12:00:45 -07:00
Kconfig kbuild: ensure full rebuild when the compiler is updated 2020-05-12 13:28:33 +09:00
MAINTAINERS Fixes for the I2C testunit, the Renesas R-Car driver and some 2024-07-13 16:34:22 -07:00
Makefile Linux 6.10.9 2024-09-08 07:56:41 +02:00
README README: Fix spelling 2024-03-18 03:36:32 -06:00

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the reStructuredText markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.