]> git.baikalelectronics.ru Git - kernel.git/commit
8250_pci: Fix potential use-after-free in error path
authorGabriel Krisman Bertazi <krisman@linux.vnet.ibm.com>
Wed, 28 Dec 2016 18:42:00 +0000 (16:42 -0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 11 Jan 2017 07:35:17 +0000 (08:35 +0100)
commitd778fd82d84d1fd49bf9b8d3e5a69b143bd7fb1a
treea36cfd3a1487d23a5742d4c413391741c519fb31
parentf34f11bf729af0bcbb0748356fc4242d4f0ca097
8250_pci: Fix potential use-after-free in error path

Commit 6fe62ae9d04c ("serial: 8250_pci: Detach low-level driver during
PCI error recovery") introduces a potential use-after-free in case the
pciserial_init_ports call in serial8250_io_resume fails, which may
happen if a memory allocation fails or if the .init quirk failed for
whatever reason).  If this happen, further pci_get_drvdata will return a
pointer to freed memory.

This patch reworks the PCI recovery resume hook to restore the old priv
structure in this case, which should be ok, since the ports were already
detached. Such error during recovery causes us to give up on the
recovery.

Fixes: 6fe62ae9d04c ("serial: 8250_pci: Detach low-level driver during
  PCI error recovery")
Reported-by: Michal Suchanek <msuchanek@suse.com>
Signed-off-by: Gabriel Krisman Bertazi <krisman@linux.vnet.ibm.com>
Signed-off-by: Guilherme G. Piccoli <gpiccoli@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/tty/serial/8250/8250_pci.c