Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4513fe91 authored by Dhoat Harpal's avatar Dhoat Harpal
Browse files

soc: qcom: glink_ssr: Set NULL after free 



In function close_ch_worker variable ss_info->cb_data is not set to
NULL after free, this results in crash due to  use after free in
notify_for_subsystem function.

This variable is set to NULL to avoid any crash due to use after free.

CRs-Fixed: 2000384
Change-Id: Ia0c7b52e4c8f5d0215fd0ebfbca5e823530f205c
Signed-off-by: default avatarDhoat Harpal <hdhoat@codeaurora.org>
parent af883d4d

drivers/soc/qcom/glink_ssr.c

+2 −1
Original line number Diff line number Diff line 
/* Copyright (c) 2014-2016, The Linux Foundation. All rights reserved.

/* Copyright (c) 2014-2017, The Linux Foundation. All rights reserved.

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License version 2 and
@@ -339,6 +339,7 @@ void close_ch_worker(struct work_struct *work) 


	BUG_ON(!ss_info->cb_data);

	kfree(ss_info->cb_data);

	ss_info->cb_data = NULL;

	kfree(close_work);

}