diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2019-05-15 01:47:00 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-05-16 10:17:24 +0300 |
| commit | 3b187319bc7c896691f317384e4035be489ae9fc (patch) | |
| tree | b807a9fa7188ceacc97bc04d8e794ff64a6e0f13 /arch/x86/um/ldt.c | |
| parent | 66ed3c8b10c16b78c9a65c484ff2f623a20431b5 (diff) | |
| download | linux-3b187319bc7c896691f317384e4035be489ae9fc.tar.xz | |
drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
commit c8ea3663f7a8e6996d44500ee818c9330ac4fd88 upstream.
strndup_user() returns error pointers on error, and then in the error
handling we pass the error pointers to kfree(). It will cause an Oops.
Link: http://lkml.kernel.org/r/20181218082003.GD32567@kadam
Fixes: 6db7199407ca ("drivers/virt: introduce Freescale hypervisor management driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Timur Tabi <timur@freescale.com>
Cc: Mihai Caraman <mihai.caraman@freescale.com>
Cc: Kumar Gala <galak@kernel.crashing.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'arch/x86/um/ldt.c')
0 files changed, 0 insertions, 0 deletions