Dan Carpenter 595a334148 dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() ... If the dw_edma_alloc_burst() function fails then we free "chunk" but it's still on the "desc->chunk->list" list so it will lead to a use after free. Also the "->chunks_alloc" count is incremented when it shouldn't be. In current kernels small allocations are guaranteed to succeed and dw_edma_alloc_burst() can't fail so this will not actually affect runtime. Fixes: e63d79d1ff ("dmaengine: Add Synopsys eDMA IP core driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Gustavo Pimentel <gustavo.pimentel@synopsys.com> Link: https://lore.kernel.org/r/X9dTBFrUPEvvW7qc@mwanda Signed-off-by: Vinod Koul <vkoul@kernel.org>		2020-12-29 10:08:00 +05:30
..
dw-edma-core.c	dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()	2020-12-29 10:08:00 +05:30
dw-edma-core.h
dw-edma-pcie.c
dw-edma-v0-core.c
dw-edma-v0-core.h
dw-edma-v0-debugfs.c
dw-edma-v0-debugfs.h
dw-edma-v0-regs.h
Kconfig
Makefile