summaryrefslogtreecommitdiff
path: root/include/linux
diff options
context:
space:
mode:
authorZenghui Yu <yuzenghui@huawei.com>2021-07-27 10:52:31 +0800
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2021-09-22 11:41:22 +0200
commit33cccd343d040ab0576e6b361adf4f84629f8844 (patch)
tree93015bbc443c3debf1eb928b5e04a01e591d9fc8 /include/linux
parentb657ca6b4be17353ac40725f00a398a04f61b5d3 (diff)
bcma: Fix memory leak for internally-handled cores
[ Upstream commit b63aed3ff195130fef12e0af590f4838cf0201d8 ] kmemleak reported that dev_name() of internally-handled cores were leaked on driver unbinding. Let's use device_initialize() to take refcounts for them and put_device() to properly free the related stuff. While looking at it, there's another potential issue for those which should be *registered* into driver core. If device_register() failed, we put device once and freed bcma_device structures. In bcma_unregister_cores(), they're treated as unregistered and we hit both UAF and double-free. That smells not good and has also been fixed now. Fixes: ab54bc8460b5 ("bcma: fill core details for every device") Signed-off-by: Zenghui Yu <yuzenghui@huawei.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Link: https://lore.kernel.org/r/20210727025232.663-2-yuzenghui@huawei.com Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions