diff options
| author | Heikki Krogerus <heikki.krogerus@linux.intel.com> | 2016-03-10 13:03:18 +0200 |
|---|---|---|
| committer | Rafael J. Wysocki <rafael.j.wysocki@intel.com> | 2016-03-10 21:33:16 +0100 |
| commit | 0d67e0fa1664ad6aaba0552e170608bafb4b6196 (patch) | |
| tree | 28987f5570ca421359271c4bc22b3dca3f90dd66 /Documentation/security | |
| parent | 7781203416ffc4e731619f8a8b93a37599a8f502 (diff) | |
| download | linux-stable-0d67e0fa1664ad6aaba0552e170608bafb4b6196.tar.gz linux-stable-0d67e0fa1664ad6aaba0552e170608bafb4b6196.tar.bz2 linux-stable-0d67e0fa1664ad6aaba0552e170608bafb4b6196.zip | |
device property: fix for a case of use-after-free
In device_remove_property_set(), the secondary fwnode needs
to be cleared before the pset is freed. This fixes a
use-after-free when a property set is providing the primary
fwnode.
As a result of the fix, the primary fwnode may end up
containing ERR_PTR(-ENODEV), so also adding checks for it to
the property handling code.
Reported-by: John Youn <John.Youn@synopsys.com>
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Diffstat (limited to 'Documentation/security')
0 files changed, 0 insertions, 0 deletions