diff options
| author |   Eric Auger <eric.auger@redhat.com> | 2019-11-26 18:54:13 +0100 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@linux-foundation.org> | 2019-12-16 08:58:42 -0800 |
| commit | 4c80ba392bf603d468ea827d902f8e7b2505fbf4 (patch) | |
| tree | 1c1e5bc6a0ac7fa9d5ff86da7330d0860aaaf9af /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | Fix root mounting with no mount options (diff) | |
| download | linux-dev-4c80ba392bf603d468ea827d902f8e7b2505fbf4.tar.xz linux-dev-4c80ba392bf603d468ea827d902f8e7b2505fbf4.zip | |
iommu: fix KASAN use-after-free in iommu_insert_resv_region
In case the new region gets merged into another one, the nr list node is
freed. Checking its type while completing the merge algorithm leads to
a use-after-free. Use new->type instead.
Fixes: 4dbd258ff63e ("iommu: Revisit iommu_insert_resv_region() implementation")
Signed-off-by: Eric Auger <eric.auger@redhat.com>
Reported-by: Qian Cai <cai@lca.pw>
Reviewed-by: Jerry Snitselaar <jsnitsel@redhat.com>
Cc: Stable <stable@vger.kernel.org> #v5.3+
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions