diff options
| author | Martin Fuzzey <mfuzzey@parkeon.com> | 2015-02-19 15:17:44 +0100 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2015-05-09 23:16:31 +0100 |
| commit | 073bfbba54f94f1a9d3f20d5e07d830efe8f8f3a (patch) | |
| tree | 884a061b51af1db31124eb2dc60655ba5a0ed560 /drivers/usb/serial/Kconfig | |
| parent | 1e6775d3670d51f2f50b5fb38ea1facbe1768061 (diff) | |
| download | kernel_samsung_smdk4412-073bfbba54f94f1a9d3f20d5e07d830efe8f8f3a.zip kernel_samsung_smdk4412-073bfbba54f94f1a9d3f20d5e07d830efe8f8f3a.tar.gz kernel_samsung_smdk4412-073bfbba54f94f1a9d3f20d5e07d830efe8f8f3a.tar.bz2 | |
iio: core: Fix double free.
commit c1b03ab5e886760bdd38c9c7a27af149046ffe01 upstream.
When an error occurred during event registration memory was freed twice
resulting in kernel memory corruption and a crash in unrelated code.
The problem was caused by
iio_device_unregister_eventset()
iio_device_unregister_sysfs()
being called twice, once on the error path and then
again via iio_dev_release().
Fix this by making these two functions idempotent so they
may be called multiple times.
The problem was observed before applying
78b33216 iio:core: Handle error when mask type is not separate
Signed-off-by: Martin Fuzzey <mfuzzey@parkeon.com>
Signed-off-by: Jonathan Cameron <jic23@kernel.org>
[bwh: Backported to 3.2:
- Adjust filenames, context
- Drop inapplicable change to iio_free_chan_devattr_list()]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'drivers/usb/serial/Kconfig')
0 files changed, 0 insertions, 0 deletions