| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 27 Nov 2014 17:46:21 -0600 From: Ahmed Tamrawi <ahmedtamrawi@...il.com> To: netdev@...r.kernel.org Subject: Possible memory leak in function (wil_write_file_wmi) not freeing pointer (wmi) on error path Bug Report: https://bugzilla.kernel.org/show_bug.cgi?id=88971 Linux Version [3.17-rc1] Configuration: Default configuration for x86 Function (wil_write_file_wmi) in file (drivers/net/wireless/ath/wil6210/debugfs.c) allocates pointer (wmi) on line (536) and passes it as a parameter to function (simple_write_to_buffer) at line (540). Function (simple_write_to_buffer) returns on line (539) with a negative value. This causes function (wil_write_file_wmi) to return on line (542) without freeing pointer (wmi). Thus, causing a possible memory leak not freeing pointer (wmi). (wil_write_file_wmi) source code reference: http://lxr.free-electrons.com/source/drivers/net/wireless/ath/wil6210/debugfs.c#L523 (simple_write_to_buffer) source code reference: http://lxr.free-electrons.com/source/fs/libfs.c#L625 ~Ahmed -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists