https://github.com/torvalds/linux
Revision e6be18f6d62c1d3b331ae020b76a29c2ccf6b0bf authored by Dan Carpenter on 28 May 2016, 05:01:46 UTC, committed by Wolfram Sang on 28 May 2016, 15:37:42 UTC
The call to put_i2c_dev() frees "i2c_dev" so there is a use after
free when we call cdev_del(&i2c_dev->cdev).

Fixes: d6760b14d4a1 ('i2c: dev: switch from register_chrdev to cdev API')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
1 parent ed2608f
History
Tip revision: e6be18f6d62c1d3b331ae020b76a29c2ccf6b0bf authored by Dan Carpenter on 28 May 2016, 05:01:46 UTC
i2c: dev: use after free in detach
Tip revision: e6be18f
File Mode Size
Documentation
arch
block
certs
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
tools
usr
virt
.get_maintainer.ignore -rw-r--r-- 31 bytes
.gitignore -rw-r--r-- 1.2 KB
.mailmap -rw-r--r-- 5.8 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 95.5 KB
Kbuild -rw-r--r-- 2.8 KB
Kconfig -rw-r--r-- 252 bytes
MAINTAINERS -rw-r--r-- 352.5 KB
Makefile -rw-r--r-- 56.0 KB
README -rw-r--r-- 18.1 KB
REPORTING-BUGS -rw-r--r-- 7.3 KB

README

back to top