mirror of
https://github.com/torvalds/linux.git
synced 2026-09-14 16:10:02 +02:00
In cdx_create_res_attr(), if sysfs_create_bin_file() fails, the code
frees res_attr but doesn't set cdx_dev->res_attr[num] to NULL. This
leaves a dangling pointer in the array. Then cdx_destroy_res_attr()
frees the already-freed memory. Fix the double free by initializing
cdx_dev->res_attr[num] after sysfs_create_bin_file() completes.
Fixes:
|
||
|---|---|---|
| .. | ||
| controller | ||
| cdx_msi.c | ||
| cdx.c | ||
| cdx.h | ||
| Kconfig | ||
| Makefile | ||