]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8b74f4f) | patch
video: fbdev: imxfb: use after free in imxfb_remove()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 31 Jul 2017 16:45:41 +0000 (18:45 +0200)
committerBartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Mon, 31 Jul 2017 16:45:41 +0000 (18:45 +0200)
commit70275ed59bd4af7ebdea4fb26bb5980bd6a3a7b4
tree656790e6704b6f12ae9d73ce6fd46a2d466853e1tree | snapshot
parent8b74f4f4576ba4882ca9e92e5c3794c2476fd0afcommit | diff
video: fbdev: imxfb: use after free in imxfb_remove()

We free "info" then dereference it on the next line.  Really this whole
function would be better if we wrote it to unwind in the mirror of how
things are allocated in the probe.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Alexander Shiyan <shc_work@mail.ru>
Cc: Sascha Hauer <kernel@pengutronix.de>
Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
drivers/video/fbdev/imxfb.c diff | blob | history
Linux Kernel Source Tree.