diff options
| author | Zijun Hu <quic_zijuhu@quicinc.com> | 2024-07-27 16:34:01 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2024-10-17 15:24:21 +0200 |
| commit | d885c464c25018b81a6b58f5d548fc2e3ef87dd1 (patch) | |
| tree | f5cc7a5e55ddbff97407591ff49cdde918193f63 /drivers/base | |
| parent | a84ae28d710be39cc61df360a3259025edca3676 (diff) | |
| download | linux-d885c464c25018b81a6b58f5d548fc2e3ef87dd1.tar.gz linux-d885c464c25018b81a6b58f5d548fc2e3ef87dd1.tar.bz2 linux-d885c464c25018b81a6b58f5d548fc2e3ef87dd1.zip | |
driver core: bus: Fix double free in driver API bus_register()
[ Upstream commit bfa54a793ba77ef696755b66f3ac4ed00c7d1248 ]
For bus_register(), any error which happens after kset_register() will
cause that @priv are freed twice, fixed by setting @priv with NULL after
the first free.
Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com>
Link: https://lore.kernel.org/r/20240727-bus_register_fix-v1-1-fed8dd0dba7a@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/base')
| -rw-r--r-- | drivers/base/bus.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/base/bus.c b/drivers/base/bus.c index d7c4330786ca..e7761e0ef5a5 100644 --- a/drivers/base/bus.c +++ b/drivers/base/bus.c @@ -920,6 +920,8 @@ bus_devices_fail: bus_remove_file(bus, &bus_attr_uevent); bus_uevent_fail: kset_unregister(&priv->subsys); + /* Above kset_unregister() will kfree @priv */ + priv = NULL; out: kfree(priv); return retval; |