summaryrefslogtreecommitdiff
path: root/fs/compat_ioctl.c
diff options
context:
space:
mode:
authorLinus Torvalds <torvalds@linux-foundation.org>2015-07-09 21:20:01 +0300
committerLinus Torvalds <torvalds@linux-foundation.org>2015-07-09 21:20:01 +0300
commit6f957724b94cb19f5c1c97efd01dd4df8ced323c (patch)
treea5f0dc7258865efa5c39e80cf729f7db5d0c970f /fs/compat_ioctl.c
parent6b7339f4c31ad69c8e9c0b2859276e22cf72176d (diff)
downloadlinux-6f957724b94cb19f5c1c97efd01dd4df8ced323c.tar.xz
Fix firmware loader uevent buffer NULL pointer dereference
The firmware class uevent function accessed the "fw_priv->buf" buffer without the proper locking and testing for NULL. This is an old bug (looks like it goes back to 2012 and commit 1244691c73b2: "firmware loader: introduce firmware_buf"), but for some reason it's triggering only now in 4.2-rc1. Shuah Khan is trying to bisect what it is that causes this to trigger more easily, but in the meantime let's just fix the bug since others are hitting it too (at least Ingo reports having seen it as well). Reported-and-tested-by: Shuah Khan <shuahkh@osg.samsung.com> Acked-by: Ming Lei <ming.lei@canonical.com> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/compat_ioctl.c')
0 files changed, 0 insertions, 0 deletions