Skip to content
Snippets Groups Projects
Commit 2949ad50 authored by Vasiliy Kulikov's avatar Vasiliy Kulikov Committed by Rafael J. Wysocki
Browse files

ACPI / debugfs: Fix buffer overflows, double free


File position is not controlled, it may lead to overwrites of arbitrary
kernel memory.  Also the code may kfree() the same pointer multiple
times.

One more flaw is still present: if multiple processes open the file then
all 3 static variables are shared, leading to various race conditions.
They should be moved to file->private_data.

Signed-off-by: default avatarVasiliy Kulikov <segoon@openwall.com>
Reviewed-by: default avatarWANG Cong <xiyou.wangcong@gmail.com>
Reviewed-by: default avatarEugene Teo <eugeneteo@kernel.org>
Cc: stable@kernel.org
Signed-off-by: default avatarRafael J. Wysocki <rjw@sisk.pl>
parent 2aa15890
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment