iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2cd395d13a
linux/drivers/mtd
History
Han Xu 2cd395d13a mtd: gpmi: fix raw_buffer pointer double free issue 
fix the raw_buffer pointer double free issue found by coverify.

CID 18344 (#2 of 2): Double free (USE_AFTER_FREE)
3. double_free: Calling gpmi_alloc_dma_buffer frees pointer
this->raw_buffer which has already been freed

Signed-off-by: Han Xu <han.xu@nxp.com>
Reviewed-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
2016-04-19 22:04:52 +02:00
..
chips mtd: cfi_cmdset_0001: fixing memory leak and handling failed kmalloc 2016-01-06 17:23:10 -08:00
devices mtd: kill the ecclayout->oobavail field 2016-03-07 16:23:09 -08:00
lpddr mtd: lpddr: show parent device in sysfs 2015-10-13 09:21:17 -07:00
maps MTD updates for v4.5: 2016-01-13 11:25:54 -08:00
nand mtd: gpmi: fix raw_buffer pointer double free issue 2016-04-19 22:04:52 +02:00
onenand MTD updates for v4.6 2016-03-24 19:57:15 -07:00
spi-nor mtd: spi-nor: support lock/unlock for a few Winbond chips 2016-03-07 18:01:58 -08:00
tests MTD updates for v4.6 2016-03-24 19:57:15 -07:00
ubi mtd: ubi: Add logging functions ubi_msg, ubi_warn and ubi_err 2016-03-20 21:36:05 +01:00
afs.c mtd: partitions: make parsers return 'const' partition arrays 2015-12-09 10:21:57 -08:00
ar7part.c mtd: partitions: make parsers return 'const' partition arrays 2015-12-09 10:21:57 -08:00
bcm47xxpart.c mtd: bcm47xxpart: don't fail because of bit-flips 2016-01-23 14:40:47 -08:00
bcm63xxpart.c mtd: bcm63xxpart: give width specifier an 'int', not 'size_t' 2016-03-07 13:13:58 -08:00
cmdlinepart.c mtd: partitions: make parsers return 'const' partition arrays 2015-12-09 10:21:57 -08:00
ftl.c mtd: ftl: use swap() in copy_erase_unit() 2015-12-18 16:56:07 -08:00
inftlcore.c
inftlmount.c
Kconfig mtd: bcm63xxpart: Remove dependency on mach-bcm63xx 2016-02-12 10:27:48 -08:00
Makefile
mtd_blkdevs.c mtd: blkdevs: fix potential deadlock + lockdep warnings 2015-10-30 17:24:43 -07:00
mtdblock_ro.c
mtdblock.c
mtdchar.c mtd: provide proper 32/64-bit compat_ioctl() support for BLKPG 2015-09-29 13:37:04 -07:00
mtdconcat.c
mtdcore.c mtd: Hook I/O activity to the MTD LED trigger 2016-04-13 10:23:16 +02:00
mtdcore.h mtd: partitions: support a cleanup callback for parsers 2015-12-09 14:57:44 -08:00
mtdoops.c
mtdpart.c mtd: create an mtd_oobavail() helper and make use of it 2016-03-07 16:23:09 -08:00
mtdsuper.c
mtdswap.c mtd: mtdswap: remove useless if (!mtd->ecclayout) test 2016-03-07 16:23:09 -08:00
nftlcore.c
nftlmount.c
ofpart.c mtd: partitions: make parsers return 'const' partition arrays 2015-12-09 10:21:57 -08:00
redboot.c mtd: partitions: make parsers return 'const' partition arrays 2015-12-09 10:21:57 -08:00
rfd_ftl.c
sm_ftl.c mtd: sm_ftl: fix wrong do_div() usage 2015-11-16 15:07:16 -08:00
sm_ftl.h
ssfdc.c