02d7d89f81
If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:
drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Link: https://lkml.kernel.org/r/20221123095147.52408-1-wangweiyang2@huawei.com
Fixes:
|
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
rio_mport_cdev.c | ||
tsi721_dma.c | ||
tsi721.c | ||
tsi721.h |