This is a note to let you know that I've just added the patch titled
drivers/input/evdev.c: don't kfree() a vmalloc address
to the 3.17-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
drivers-input-evdev.c-don-t-kfree-a-vmalloc-address.patch
and it can be found in the queue-3.17 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 92788ac1eb06e69a822de45e2a8a63fa45eb5be2 Mon Sep 17 00:00:00 2001
From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
Date: Tue, 2 Dec 2014 15:59:31 -0800
Subject: drivers/input/evdev.c: don't kfree() a vmalloc address
From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
commit 92788ac1eb06e69a822de45e2a8a63fa45eb5be2 upstream.
If kzalloc() failed and then evdev_open_device() fails, evdev_open()
will pass a vmalloc'ed pointer to kfree.
This might fix https://bugzilla.kernel.org/show_bug.cgi?id=88401, where
there was a crash in kfree().
Reported-by: Christian Casteyde <casteyde.christian@xxxxxxx>
Belatedly-Acked-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Cc: Henrik Rydberg <rydberg@xxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
drivers/input/evdev.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/input/evdev.c
+++ b/drivers/input/evdev.c
@@ -421,7 +421,7 @@ static int evdev_open(struct inode *inod
err_free_client:
evdev_detach_client(evdev, client);
- kfree(client);
+ kvfree(client);
return error;
}
Patches currently in stable-queue which might be from akpm@xxxxxxxxxxxxxxxxxxxx are
queue-3.17/mm-vmpressure.c-fix-race-in-vmpressure_work_fn.patch
queue-3.17/mm-fix-swapoff-hang-after-page-migration-and-fork.patch
queue-3.17/slab-fix-nodeid-bounds-check-for-non-contiguous-node-ids.patch
queue-3.17/mm-frontswap-invalidate-expired-data-on-a-dup-store-failure.patch
queue-3.17/drivers-input-evdev.c-don-t-kfree-a-vmalloc-address.patch
queue-3.17/mm-fix-anon_vma_clone-error-treatment.patch
queue-3.17/fat-fix-oops-on-corrupted-vfat-fs.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html