linux/drivers/mtd/devices
Ingo van Lil 2875fb65f8 mtd: memory corruption in block2mtd.c
The block2mtd driver (drivers/mtd/devices/block2mtd.c) will kfree an on-stack
pointer when handling an invalid argument line (e.g.
block2mtd=/dev/loop0,xxx).

The kfree was added some time ago when "name" was dynamically allocated.

Signed-off-by: Ingo van Lil <inguin@gmx.de>
Acked-by: Joern Engel <joern@lazybastard.org>
Cc: David Woodhouse <dwmw2@infradead.org>
Cc: <stable@kernel.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-03-24 19:22:19 -07:00
..
block2mtd.c mtd: memory corruption in block2mtd.c 2008-03-24 19:22:19 -07:00
doc2000.c Merge git://git.infradead.org/mtd-2.6 2008-02-07 10:20:31 -08:00
doc2001.c
doc2001plus.c
docecc.c
docprobe.c
Kconfig
lart.c
m25p80.c
Makefile
ms02-nv.c
ms02-nv.h
mtd_dataflash.c
mtdram.c
phram.c
pmc551.c
slram.c