Re: [PATCH] sh: intc: Fix possible UAF in register_intc_controller
Geert Uytterhoeven <[email protected]>
| Newsgroups | gmane.linux.ports.sh.devel |
|---|---|
| Message-ID | <CAMuHMdXznLuo7QegG9giQo80HcRmV4MgKh67sWy2WJXd4Pry+Q@mail.gmail.com> |
On Wed, Oct 30, 2024 at 7:17 AM Chen Ridong <[email protected]> wrote: > From: Chen Ridong <[email protected]> > > When it goes to error, the 'd' is freed, but 'd->list' was not deleted > from 'intc_list', which may lead to a UAF. > > Fixes: 01e9651a21bc ("sh: add INTC out of memory error handling") > Signed-off-by: Chen Ridong <[email protected]> Reviewed-by: Geert Uytterhoeven <[email protected]> Gr{oetje,eeting}s, Geert -- Geert Uytterhoeven -- There's lots of Linux beyond ia32 -- [email protected] In personal conversations with technical people, I call myself a hacker. But when I'm talking to journalists I just say "programmer" or something like that. -- Linus Torvalds