forked from luck/tmp_suning_uos_patched
91e4ad05bf
commit 25a1433216489de4abc889910f744e952cb6dbae upstream. There are two bugs: 1) If ida_simple_get() fails then this code calls put_device(carrier) but we haven't yet called get_device(carrier) and probably that leads to a use after free. 2) After device_initialize() then we need to use put_device() to release the bus. This will free the internal resources tied to the device and call mcb_free_bus() which will free the rest. Fixes: |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
mcb-core.c | ||
mcb-internal.h | ||
mcb-lpc.c | ||
mcb-parse.c | ||
mcb-pci.c |