mirror of https://github.com/torvalds/linux.git
e0d3b845a1
The free_device_compression_mode(iaa_device, device_mode) function frees
"device_mode" but it iss passed to iaa_compression_modes[i]->free() a few
lines later resulting in a use after free.
The good news is that, so far as I can tell, nothing implements the
->free() function and the use after free happens in dead code. But, with
this fix, when something does implement it, we'll be ready. :)
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| iaa_crypto.h | ||
| iaa_crypto_comp_fixed.c | ||
| iaa_crypto_main.c | ||
| iaa_crypto_stats.c | ||
| iaa_crypto_stats.h | ||