diff options
author | Dinghao Liu <[email protected]> | 2023-12-14 15:29:43 +0800 |
---|---|---|
committer | Miquel Raynal <[email protected]> | 2023-12-14 16:42:01 +0100 |
commit | 2b8aa4c3e6a5d41b10b53da2017852f647d0345b (patch) | |
tree | 500da49b74efd27c350439d57852a819dc4cdba7 /scripts/generate_rust_analyzer.py | |
parent | b6c985dd9a2d5902e413c2e9ba5a770fbca12322 (diff) |
mtd: rawnand: diskonchip: fix a potential double free in doc_probe
When nand_scan() fails, it has cleaned up related resources
in its error paths. Therefore, the following nand_cleanup()
may lead to a double-free. One possible trace is:
doc_probe
|-> nand_scan
| |-> nand_scan_with_ids
| |-> nand_scan_tail
| |-> kfree(chip->data_buf) [First free]
|
|-> nand_cleanup
|-> kfree(chip->data_buf) [Double free here]
Fix this by removing nand_cleanup() on failure of
nand_scan().
Signed-off-by: Dinghao Liu <[email protected]>
Signed-off-by: Miquel Raynal <[email protected]>
Link: https://lore.kernel.org/linux-mtd/[email protected]
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions