linux/drivers/virt
Dan Carpenter c8ea3663f7 drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
strndup_user() returns error pointers on error, and then in the error
handling we pass the error pointers to kfree().  It will cause an Oops.

Link: http://lkml.kernel.org/r/20181218082003.GD32567@kadam
Fixes: 6db7199407 ("drivers/virt: introduce Freescale hypervisor management driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Timur Tabi <timur@freescale.com>
Cc: Mihai Caraman <mihai.caraman@freescale.com>
Cc: Kumar Gala <galak@kernel.crashing.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2019-05-14 19:52:52 -07:00
..
vboxguest virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace 2019-04-25 21:52:40 +02:00
fsl_hypervisor.c drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl 2019-05-14 19:52:52 -07:00
Kconfig virt: Add vboxguest driver for Virtual Box Guest integration 2017-12-18 16:12:22 +01:00
Makefile virt: Add vboxguest driver for Virtual Box Guest integration 2017-12-18 16:12:22 +01:00