This is a note to let you know that I've just added the patch titled
drivers/input/evdev.c: don't kfree() a vmalloc address
to the 3.17-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
drivers-input-evdev.c-don-t-kfree-a-vmalloc-address.patch
and it can be found in the queue-3.17 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.
>From 92788ac1eb06e69a822de45e2a8a63fa45eb5be2 Mon Sep 17 00:00:00 2001
From: Andrew Morton <[email protected]>
Date: Tue, 2 Dec 2014 15:59:31 -0800
Subject: drivers/input/evdev.c: don't kfree() a vmalloc address
From: Andrew Morton <[email protected]>
commit 92788ac1eb06e69a822de45e2a8a63fa45eb5be2 upstream.
If kzalloc() failed and then evdev_open_device() fails, evdev_open()
will pass a vmalloc'ed pointer to kfree.
This might fix https://bugzilla.kernel.org/show_bug.cgi?id=88401, where
there was a crash in kfree().
Reported-by: Christian Casteyde <[email protected]>
Belatedly-Acked-by: Dmitry Torokhov <[email protected]>
Cc: Henrik Rydberg <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
---
drivers/input/evdev.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/input/evdev.c
+++ b/drivers/input/evdev.c
@@ -421,7 +421,7 @@ static int evdev_open(struct inode *inod
err_free_client:
evdev_detach_client(evdev, client);
- kfree(client);
+ kvfree(client);
return error;
}
Patches currently in stable-queue which might be from [email protected]
are
queue-3.17/mm-vmpressure.c-fix-race-in-vmpressure_work_fn.patch
queue-3.17/mm-fix-swapoff-hang-after-page-migration-and-fork.patch
queue-3.17/slab-fix-nodeid-bounds-check-for-non-contiguous-node-ids.patch
queue-3.17/mm-frontswap-invalidate-expired-data-on-a-dup-store-failure.patch
queue-3.17/drivers-input-evdev.c-don-t-kfree-a-vmalloc-address.patch
queue-3.17/mm-fix-anon_vma_clone-error-treatment.patch
queue-3.17/fat-fix-oops-on-corrupted-vfat-fs.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
