diff options
| author | Oleg Nesterov | 2013-07-04 00:08:16 +0200 |
|---|---|---|
| committer | Linus Torvalds | 2013-07-04 01:08:02 +0200 |
| commit | e7fd1549aeb83e34ee0955cdf5dee5d4088508f3 (patch) | |
| tree | ff08986f52f3e870205001290d7d1df5352558b8 /sound/soc/au1x/psc.h | |
| parent | usermodehelper: kill the sub_info->path[0] check (diff) | |
| download | kernel-qcow2-linux-e7fd1549aeb83e34ee0955cdf5dee5d4088508f3.tar.gz kernel-qcow2-linux-e7fd1549aeb83e34ee0955cdf5dee5d4088508f3.tar.xz kernel-qcow2-linux-e7fd1549aeb83e34ee0955cdf5dee5d4088508f3.zip | |
coredump: format_corename() can leak cn->corename
do_coredump() assumes that format_corename() can only fail if
expand_corename() fails and frees cn->corename. This is not true, for
example cn_print_exe_file() can fail and in this case nobody frees
cn->corename.
Change do_coredump() to always do kfree(cn->corename) after it calls
format_corename() (NULL is fine), change expand_corename() to do nothing
if kmalloc() fails.
Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Cc: Andi Kleen <andi@firstfloor.org>
Cc: Colin Walters <walters@verbum.org>
Cc: Denys Vlasenko <vda.linux@googlemail.com>
Cc: Jiri Slaby <jslaby@suse.cz>
Cc: Lennart Poettering <mzxreary@0pointer.de>
Cc: Lucas De Marchi <lucas.de.marchi@gmail.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'sound/soc/au1x/psc.h')
0 files changed, 0 insertions, 0 deletions