projects / GitHub / MotorolaMobilityLLC / kernel-slsi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ed2608f) | patch
i2c: dev: use after free in detach
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 28 May 2016 05:01:46 +0000 (08:01 +0300)
committerWolfram Sang <wsa@the-dreams.de>
Sat, 28 May 2016 15:37:42 +0000 (17:37 +0200)
commite6be18f6d62c1d3b331ae020b76a29c2ccf6b0bf
tree2ce62107bbfa2312926f4e1e49ef1300ad67b79dtree | snapshot (tar.gz zip)
parented2608faa0f701b1dbc65277a9e5c7ff7118bfd4commit | diff
i2c: dev: use after free in detach

The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).

Fixes: d6760b14d4a1 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
drivers/i2c/i2c-dev.c diff | blob | blame | history
Motorola kernel-slsi