android_kernel_xiaomi_sm8350/drivers/mtd/devices
Ingo van Lil 2875fb65f8 mtd: memory corruption in block2mtd.c
The block2mtd driver (drivers/mtd/devices/block2mtd.c) will kfree an on-stack
pointer when handling an invalid argument line (e.g.
block2mtd=/dev/loop0,xxx).

The kfree was added some time ago when "name" was dynamically allocated.

Signed-off-by: Ingo van Lil <inguin@gmx.de>
Acked-by: Joern Engel <joern@lazybastard.org>
Cc: David Woodhouse <dwmw2@infradead.org>
Cc: <stable@kernel.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-03-24 19:22:19 -07:00
..
block2mtd.c mtd: memory corruption in block2mtd.c 2008-03-24 19:22:19 -07:00
doc2000.c Merge git://git.infradead.org/mtd-2.6 2008-02-07 10:20:31 -08:00
doc2001.c
doc2001plus.c [MTD] [DOC200x] eccbuf is statically defined and always evaluate to true 2008-02-07 10:34:36 +00:00
docecc.c
docprobe.c
Kconfig
lart.c [MTD] [NOR] Test devtype, not definition in flash_probe(), drivers/mtd/devices/lart.c 2008-02-03 18:12:09 +11:00
m25p80.c
Makefile
ms02-nv.c
ms02-nv.h
mtd_dataflash.c [MTD] mtd_dataflash: Incorrect compare-after-write check 2007-11-28 11:55:32 +00:00
mtdram.c
phram.c Claim maintainership for block2mtd and update email addresses 2008-02-06 10:41:09 -08:00
pmc551.c
slram.c