Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 2949ad50 authored by Vasiliy Kulikov's avatar Vasiliy Kulikov Committed by Rafael J. Wysocki
Browse files

ACPI / debugfs: Fix buffer overflows, double free



File position is not controlled, it may lead to overwrites of arbitrary
kernel memory.  Also the code may kfree() the same pointer multiple
times.

One more flaw is still present: if multiple processes open the file then
all 3 static variables are shared, leading to various race conditions.
They should be moved to file->private_data.

Signed-off-by: default avatarVasiliy Kulikov <segoon@openwall.com>
Reviewed-by: default avatarWANG Cong <xiyou.wangcong@gmail.com>
Reviewed-by: default avatarEugene Teo <eugeneteo@kernel.org>
Cc: stable@kernel.org
Signed-off-by: default avatarRafael J. Wysocki <rjw@sisk.pl>
parent 2aa15890
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment