Commit 1f316b42 authored Mar 24, 2022 by Dan Carpenter Committed by Greg Kroah-Hartman Apr 15, 2022

lib/test: use after free in register_test_dev_kmod()



[ Upstream commit dc0ce6cc4b133f5f2beb8b47dacae13a7d283c2c ]

The "test_dev" pointer is freed but then returned to the caller.

Fixes: d9c6a72d ("kmod: add test driver to stress test the module loader")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Luis Chamberlain <mcgrof@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

parent 7a2ba24c

lib/test_kmod.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -1155,6 +1155,7 @@ static struct kmod_test_device *register_test_dev_kmod(void)
		if (ret) {
		pr_err("could not register misc device: %d\n", ret);
		free_test_dev_kmod(test_dev);
		test_dev = NULL;
		goto out;
		}