ChangeSet 1.2020.1.152, 2005/03/08 01:04:42-08:00, [EMAIL PROTECTED]
[PATCH] USB: Fix use after free in usb/core/devices.c
There's a low probability use-after-free here caused by some switched
pointers, st needs to go back to file->private_data
Found by Coverity tool
Signed-off-by: Alexander Nyberg <[EMAIL PROTECTED]>
Signed-off-by: Greg Kroah-Hartman <[EMAIL PROTECTED]>
drivers/usb/core/devices.c | 1 +
1 files changed, 1 insertion(+)
diff -Nru a/drivers/usb/core/devices.c b/drivers/usb/core/devices.c
--- a/drivers/usb/core/devices.c 2005-03-08 16:39:31 -08:00
+++ b/drivers/usb/core/devices.c 2005-03-08 16:39:31 -08:00
@@ -608,6 +608,7 @@
/* we may have dropped BKL - need to check for having lost the
race */
if (file->private_data) {
kfree(st);
+ st = file->private_data;
goto lost_race;
}
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
[email protected]
To unsubscribe, use the last form field at:
https://lists.sourceforge.net/lists/listinfo/linux-usb-devel
