Dan Carpenter
816c9311f1
misc: mic: double free on ioctl error path
...
This function only has one caller. Freeing "vdev" here leads to a use
after free bug. There are several other error paths in this function
but this is the only one which frees "vdev". It looks like the kfree()
can be safely removed.
Fixes: 61e9c905df ("misc: mic: Enable VOP host side functionality")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-01-10 21:46:41 +01:00
..
altera-stapl
c2port
misc: c2port: use kobj_to_dev()
2016-02-07 23:01:45 -08:00
cb710
cxl
powerpc updates for 4.10
2016-12-16 09:26:42 -08:00
echo
eeprom
Merge branch 'i2c/for-4.9' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2016-10-07 14:12:21 -07:00
genwqe
genwqe: use pci_irq_allocate_vectors
2016-10-31 04:00:09 -06:00
ibmasm
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
lis3lv02d
misc: apds990x, bh1770glc, lis3lv02d: use to_i2c_client
2016-02-07 23:01:45 -08:00
mei
mei: move write cb to completion on credentials failures
2017-01-04 18:22:44 +01:00
mic
misc: mic: double free on ioctl error path
2017-01-10 21:46:41 +01:00
sgi-gru
mm: use vmf->address instead of of vmf->virtual_address
2016-12-14 16:04:09 -08:00
sgi-xp
net: use core MTU range checking in misc drivers
2016-10-20 14:51:10 -04:00
ti-st
drivers: misc: ti-st: Use int instead of fuzzy char for callback status
2016-07-17 19:59:26 +02:00
vmw_vmci
VMCI: Doorbell create and destroy fixes
2016-10-28 08:26:21 -04:00
ad525x_dpot-i2c.c
ad525x_dpot-spi.c
ad525x_dpot.c
misc: ad525x_dpot: Fix the enabling of the "otpXen" attributes
2016-03-01 16:55:13 -08:00
ad525x_dpot.h
apds990x.c
misc: apds990x, bh1770glc, lis3lv02d: use to_i2c_client
2016-02-07 23:01:45 -08:00
apds9802als.c
arm-charlcd.c
drivers/misc: make arm-charlcd.c explicitly non-modular
2016-02-07 23:01:45 -08:00
atmel-ssc.c
ASoC: atmel_ssc_dai: distinguish the different SSC
2016-03-02 23:43:11 +09:00
atmel_tclib.c
bh1770glc.c
misc: apds990x, bh1770glc, lis3lv02d: use to_i2c_client
2016-02-07 23:01:45 -08:00
cs5535-mfgpt.c
ds1682.c
dummy-irq.c
enclosure.c
fsa9480.c
hmc6352.c
hpilo.c
drivers/misc/hpilo: Changes to support new security states in iLO5 FW
2016-09-27 12:53:46 +02:00
hpilo.h
ics932s401.c
ioc4.c
isl29003.c
isl29020.c
Kconfig
Merge 4.8-rc5 into char-misc-next
2016-09-05 08:04:07 +02:00
kgdbts.c
lattice-ecp3-config.c
lkdtm.h
lkdtm: Add tests for struct list corruption
2016-10-31 13:01:58 -07:00
lkdtm_bugs.c
Char/Misc driver patches for 4.10-rc1
2016-12-13 12:11:01 -08:00
lkdtm_core.c
lkdtm: Add tests for struct list corruption
2016-10-31 13:01:58 -07:00
lkdtm_heap.c
lkdtm: silence warnings about function declarations
2016-07-15 16:14:45 -07:00
lkdtm_perms.c
lkdtm: Do not use flush_icache_range() on user addresses
2016-11-10 15:34:56 +01:00
lkdtm_rodata.c
lkdtm: Mark lkdtm_rodata_do_nothing() notrace
2016-08-31 13:12:38 +02:00
lkdtm_usercopy.c
lkdtm: adjust usercopy tests to bypass const checks
2016-09-06 12:17:30 -07:00
Makefile
Merge 4.8-rc5 into char-misc-next
2016-09-05 08:04:07 +02:00
panel.c
misc: panel, convert struct to bitmap
2016-02-11 19:24:23 -08:00
pch_phub.c
misc: pch_phub: Add UART_CLK quirk for Boston platform
2016-08-31 15:45:18 +02:00
phantom.c
pti.c
qcom-coincell.c
ARM: qcom: silence an uninitialized variable warning
2016-05-01 14:20:04 -07:00
spear13xx_pcie_gadget.c
sram.c
misc: set error code when devm_kstrdup fails
2017-01-10 21:46:41 +01:00
ti_dac7512.c
tifm_7xx1.c
tifm_core.c
tsl2550.c
vexpress-syscfg.c
vmw_balloon.c