diff options
| author | Thomas Gleixner <tglx@linutronix.de> | 2010-09-28 20:57:19 +0200 |
|---|---|---|
| committer | H. Peter Anvin <hpa@linux.intel.com> | 2010-10-01 00:57:35 +0200 |
| commit | 1cf180c94e9166cda083ff65333883ab3648e852 (patch) | |
| tree | 70cee3eaf3f99abf64377f19a864bb56974b3547 /drivers/char/agp/intel-agp.c | |
| parent | x86, cpu: After uncapping CPUID, re-run CPU feature detection (diff) | |
| download | linux-1cf180c94e9166cda083ff65333883ab3648e852.tar.xz linux-1cf180c94e9166cda083ff65333883ab3648e852.zip | |
x86, irq: Plug memory leak in sparse irq
free_irq_cfg() is not freeing the cpumask_vars in irq_cfg. Fixing this
triggers a use after free caused by the fact that copying struct
irq_cfg is done with memcpy, which copies the pointer not the cpumask.
Fix both places.
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: Yinghai Lu <yhlu.kernel@gmail.com>
LKML-Reference: <alpine.LFD.2.00.1009282052570.2416@localhost6.localdomain6>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: stable@kernel.org
Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
Diffstat (limited to 'drivers/char/agp/intel-agp.c')
0 files changed, 0 insertions, 0 deletions