diff options
| author | Todd Kjos <[email protected]> | 2019-06-21 17:54:15 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2019-06-22 09:49:16 +0000 |
| commit | 1909a671dbc3606685b1daf8b22a16f65ea7edda (patch) | |
| tree | e3fe8453fc0122847fc8b7fba6505658d595a310 /drivers/android/binder_alloc.c | |
| parent | misc: xilinx_sdfec: Add CCF support (diff) | |
| download | kernel-1909a671dbc3606685b1daf8b22a16f65ea7edda.tar.gz kernel-1909a671dbc3606685b1daf8b22a16f65ea7edda.zip | |
binder: fix memory leak in error path
syzkallar found a 32-byte memory leak in a rarely executed error
case. The transaction complete work item was not freed if put_user()
failed when writing the BR_TRANSACTION_COMPLETE to the user command
buffer. Fixed by freeing it before put_user() is called.
Reported-by: [email protected]
Signed-off-by: Todd Kjos <[email protected]>
Cc: stable <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'drivers/android/binder_alloc.c')
0 files changed, 0 insertions, 0 deletions