]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 39ca428) | patch
video: fbdev: imxfb: use after free in imxfb_remove()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 31 Jul 2017 16:45:41 +0000 (18:45 +0200)
committerBartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Mon, 31 Jul 2017 16:45:41 +0000 (18:45 +0200)
commitad63957ae0419a3552dc651751d0d550cdd9c30c
tree656790e6704b6f12ae9d73ce6fd46a2d466853e1tree | snapshot
parent39ca428cb491c5108b239365b7603145dd6df933commit | diff
video: fbdev: imxfb: use after free in imxfb_remove()

We free "info" then dereference it on the next line.  Really this whole
function would be better if we wrote it to unwind in the mirror of how
things are allocated in the probe.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Alexander Shiyan <shc_work@mail.ru>
Cc: Sascha Hauer <kernel@pengutronix.de>
Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
drivers/video/fbdev/imxfb.c diff | blob | history
Linux Kernel Source Tree.