git.samba.org / sfrench / cifs-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 578c1bb) | patch
xen/xenbus: Fix a double free in xenbus_map_ring_pv()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 10 Jul 2020 11:36:10 +0000 (14:36 +0300)
committerBoris Ostrovsky <boris.ostrovsky@oracle.com>
Fri, 10 Jul 2020 12:20:43 +0000 (07:20 -0500)
commitba8c423488974f02b538e9dc1730f0334f9b85aa
tree72a1ee9e90ff23e74fb7ae6d5ff38897a8b383eftree
parent578c1bb9056263ad3c9e09746b3d6e4daf63bdb0commit | diff
xen/xenbus: Fix a double free in xenbus_map_ring_pv()

When there is an error the caller frees "info->node" so the free here
will result in a double free.  We should just delete first kfree().

Fixes: 3848e4e0a32a ("xen/xenbus: avoid large structs and arrays on the stack")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20200710113610.GA92345@mwanda
Reviewed-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
drivers/xen/xenbus/xenbus_client.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.