HSI: core: Fix return freed object in hsi_new_client
authorChengfeng Ye <cyeaa@connect.ust.hk>
Fri, 5 Nov 2021 13:45:07 +0000 (06:45 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Jan 2022 08:00:54 +0000 (09:00 +0100)
commit0d71b4d184c759af5f2d3eefb7fbb9bfd66b3191
treed55a6bb8b7b21eb085db68b17c794690d22cad81
parent9e4b0e11d06c9562c97383d75cfa9d50c5c428ff
HSI: core: Fix return freed object in hsi_new_client

[ Upstream commit a1ee1c08fcd5af03187dcd41dcab12fd5b379555 ]

cl is freed on error of calling device_register, but this
object is return later, which will cause uaf issue. Fix it
by return NULL on error.

Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk>
Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/hsi/hsi_core.c