Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 12782306 authored by Dhoat Harpal's avatar Dhoat Harpal Committed by Chris Lew
Browse files

soc: qcom: glink_ssr: Set NULL after free 



In function close_ch_worker variable ss_info->cb_data is not set to
NULL after free, this results in crash due to  use after free in
notify_for_subsystem function.

This variable is set to NULL to avoid any crash due to use after free.

CRs-Fixed: 2000384
Change-Id: Ia0c7b52e4c8f5d0215fd0ebfbca5e823530f205c
Signed-off-by: default avatarDhoat Harpal <hdhoat@codeaurora.org>
parent 67057ff8

drivers/soc/qcom/glink_ssr.c

+1 −0
Original line number Diff line number Diff line
@@ -341,6 +341,7 @@ void close_ch_worker(struct work_struct *work) 
	if (WARN_ON(!ss_info->cb_data))

		return;

	kfree(ss_info->cb_data);

	ss_info->cb_data = NULL;

	kfree(close_work);

}