]> git.dujemihanovic.xyz Git - linux.git/commit
platform/x86: x86-android-tablets: Fix use after free on platform_device_register...
authorHans de Goede <hdegoede@redhat.com>
Sat, 5 Oct 2024 13:05:45 +0000 (15:05 +0200)
committerHans de Goede <hdegoede@redhat.com>
Sun, 6 Oct 2024 10:50:50 +0000 (12:50 +0200)
commit2fae3129c0c08e72b1fe93e61fd8fd203252094a
treed2f0504ee56ea39eb763a8ff2316a5afc256b6a3
parent5984b40f5bcd41bfd08359cdb9c8cb7ca9d3cc60
platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

x86_android_tablet_remove() frees the pdevs[] array, so it should not
be used after calling x86_android_tablet_remove().

When platform_device_register() fails, store the pdevs[x] PTR_ERR() value
into the local ret variable before calling x86_android_tablet_remove()
to avoid using pdevs[] after it has been freed.

Fixes: 5eba0141206e ("platform/x86: x86-android-tablets: Add support for instantiating platform-devs")
Fixes: e2200d3f26da ("platform/x86: x86-android-tablets: Add gpio_keys support to x86_android_tablet_init()")
Cc: stable@vger.kernel.org
Reported-by: Aleksandr Burakov <a.burakov@rosalinux.ru>
Closes: https://lore.kernel.org/platform-driver-x86/20240917120458.7300-1-a.burakov@rosalinux.ru/
Signed-off-by: Hans de Goede <hdegoede@redhat.com>
Link: https://lore.kernel.org/r/20241005130545.64136-1-hdegoede@redhat.com
drivers/platform/x86/x86-android-tablets/core.c