From: Sasha Levin <[email protected]> Date: Fri, 26 Sep 2014 21:41:43 -0400
> llc_ui_sendmsg would not make sure that a device indeed exists before > dereferencing it. This caused a user triggerable NULL ptr deref: ... > Signed-off-by: Sasha Levin <[email protected]> The bug is real, but I don't think the fix is in the correct spot. The real problem seems to be that the guard for calling llc_ui_autobind() is inaccurate. Fix that and there will always be a proper llc->dev attached at this location. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
