diff options
| author |   OGAWA Hirofumi <hirofumi@mail.parknet.co.jp> | 2018-07-20 17:53:42 -0700 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@linux-foundation.org> | 2018-07-21 12:50:46 -0700 |
| commit | 35033ab988c396ad7bce3b6d24060c16a9066db8 (patch) | |
| tree | 52602d1e8977c4fa765150c99f9af610f7a8fe5e /mm | |
| parent | MAINTAINERS: Peter has moved (diff) | |
| download | linux-dev-35033ab988c396ad7bce3b6d24060c16a9066db8.tar.xz linux-dev-35033ab988c396ad7bce3b6d24060c16a9066db8.zip | |
fat: fix memory allocation failure handling of match_strdup()
In parse_options(), if match_strdup() failed, parse_options() leaves
opts->iocharset in unexpected state (i.e. still pointing the freed
string). And this can be the cause of double free.
To fix, this initialize opts->iocharset always when freeing.
Link: http://lkml.kernel.org/r/8736wp9dzc.fsf@mail.parknet.co.jp
Signed-off-by: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>
Reported-by: syzbot+90b8e10515ae88228a92@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'mm')
0 files changed, 0 insertions, 0 deletions