]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2d7ce66) | patch
i2c: dev: use after free in detach
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 28 May 2016 05:01:46 +0000 (08:01 +0300)
committerWolfram Sang <wsa@the-dreams.de>
Sat, 28 May 2016 15:37:42 +0000 (17:37 +0200)
commit06fd86d3150256cbb3b952137d2c1abd58076229
tree2ce62107bbfa2312926f4e1e49ef1300ad67b79dtree | snapshot
parent2d7ce66042bc36ff6b284a31284a510da39de4fbcommit | diff
i2c: dev: use after free in detach

The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).

Fixes: b6d0cdf7d136 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
drivers/i2c/i2c-dev.c diff | blob | history
Linux Kernel Source Tree.