]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3e464c4) | patch
i2c: dev: use after free in detach
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 28 May 2016 05:01:46 +0000 (08:01 +0300)
committerWolfram Sang <wsa@the-dreams.de>
Sat, 28 May 2016 15:37:42 +0000 (17:37 +0200)
commit09226f0a2ced6c31a99a3703926c64a6ec982a17
tree2ce62107bbfa2312926f4e1e49ef1300ad67b79dtree | snapshot
parent3e464c4c05ece3aa798529239b04078f0a451feecommit | diff
i2c: dev: use after free in detach

The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).

Fixes: 1b1dfd842e94 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
drivers/i2c/i2c-dev.c diff | blob | history
Linux Kernel Source Tree.