android_kernel_motorola_sm6375/drivers/mcb
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Haoxiang Li d70184958b mcb: fix a double free bug in chameleon_parse_gdd()
commit 7c7f1bfdb2249f854a736d9b79778c7e5a29a150 upstream.

In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev'
would be released in mcb_device_register() via put_device().
Thus, goto 'err' label and free 'mdev' again causes a double free.
Just return if mcb_device_register() fails.

Fixes: 3764e82e51 ("drivers: Introduce MEN Chameleon Bus")
Cc: stable <stable@kernel.org>
Signed-off-by: Haoxiang Li <haoxiang_li2024@163.com>
Signed-off-by: Johannes Thumshirn <jth@kernel.org>
Link: https://lore.kernel.org/r/6201d09e2975ae5789879f79a6de4c38de9edd4a.1741596225.git.jth@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-05-02 07:39:26 +02:00
..
Kconfig
Makefile
mcb-core.c mcb: fix error handling for different scenarios when parsing 2023-11-28 16:50:19 +00:00
mcb-internal.h
mcb-lpc.c mcb-lpc: Reallocate memory region to avoid memory overlapping 2023-11-08 11:23:34 +01:00
mcb-parse.c mcb: fix a double free bug in chameleon_parse_gdd() 2025-05-02 07:39:26 +02:00
mcb-pci.c