Amit Shah <[email protected]> writes:
> Remove the debugfs path before freeing port->name, to prevent a possible
> use-after-free.
>
> Reported-by: Jason Wang <[email protected]>
> Signed-off-by: Amit Shah <[email protected]>

Applied,
Rusty.

> ---
>  drivers/char/virtio_console.c | 3 +--
>  1 file changed, 1 insertion(+), 2 deletions(-)
>
> diff --git a/drivers/char/virtio_console.c b/drivers/char/virtio_console.c
> index 4e380c1..e910bec 100644
> --- a/drivers/char/virtio_console.c
> +++ b/drivers/char/virtio_console.c
> @@ -1574,9 +1574,8 @@ static void unplug_port(struct port *port)
>       device_destroy(pdrvdata.class, port->dev->devt);
>       cdev_del(port->cdev);
>  
> -     kfree(port->name);
> -
>       debugfs_remove(port->debugfs_file);
> +     kfree(port->name);
>  
>       /*
>        * Locks around here are not necessary - a port can't be
> -- 
> 1.8.1.4
_______________________________________________
Virtualization mailing list
[email protected]
https://lists.linuxfoundation.org/mailman/listinfo/virtualization

Reply via email to