lkml.org 
[lkml]   [2019]   [Jan]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4.20 052/145] Input: atmel_mxt_ts - dont try to free unallocated kernel memory
    Date
    4.20-stable review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Sanjeev Chugh <sanjeev_chugh@mentor.com>

    commit 1e3c336ad8f40f88a8961c434640920fe35cc08b upstream.

    If the user attempts to update Atmel device with an invalid configuration
    cfg file, error handling code is trying to free cfg file memory which is
    not allocated yet hence results into kernel crash.

    This patch fixes the order of memory free operations.

    Signed-off-by: Sanjeev Chugh <sanjeev_chugh@mentor.com>
    Fixes: a4891f105837 ("Input: atmel_mxt_ts - zero terminate config firmware file")
    Cc: stable@vger.kernel.org
    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

    ---
    drivers/input/touchscreen/atmel_mxt_ts.c | 4 ++--
    1 file changed, 2 insertions(+), 2 deletions(-)

    --- a/drivers/input/touchscreen/atmel_mxt_ts.c
    +++ b/drivers/input/touchscreen/atmel_mxt_ts.c
    @@ -1585,10 +1585,10 @@ static int mxt_update_cfg(struct mxt_dat
    /* T7 config may have changed */
    mxt_init_t7_power_cfg(data);

    -release_raw:
    - kfree(cfg.raw);
    release_mem:
    kfree(cfg.mem);
    +release_raw:
    + kfree(cfg.raw);
    return ret;
    }


    \
     
     \ /
      Last update: 2019-01-07 18:24    [W:3.935 / U:0.044 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site