From dc0ce6cc4b133f5f2beb8b47dacae13a7d283c2c Mon Sep 17 00:00:00 2001 From: Dan Carpenter Date: Thu, 24 Mar 2022 08:52:07 +0300 Subject: lib/test: use after free in register_test_dev_kmod() The "test_dev" pointer is freed but then returned to the caller. Fixes: d9c6a72d6fa2 ("kmod: add test driver to stress test the module loader") Signed-off-by: Dan Carpenter Signed-off-by: Luis Chamberlain --- lib/test_kmod.c | 1 + 1 file changed, 1 insertion(+) (limited to 'lib/test_kmod.c') diff --git a/lib/test_kmod.c b/lib/test_kmod.c index ce1589391413..cb800b1d0d99 100644 --- a/lib/test_kmod.c +++ b/lib/test_kmod.c @@ -1149,6 +1149,7 @@ static struct kmod_test_device *register_test_dev_kmod(void) if (ret) { pr_err("could not register misc device: %d\n", ret); free_test_dev_kmod(test_dev); + test_dev = NULL; goto out; } -- cgit v1.2.3