From: Greg Kroah-Hartman Date: Wed, 30 Jan 2013 05:36:37 +0000 (+0100) Subject: 3.4-stable patches X-Git-Tag: v3.0.62~37 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0564172e42dfbf99894dcb7fef5399013188c847;p=thirdparty%2Fkernel%2Fstable-queue.git 3.4-stable patches added patches: fs-cifs-cifs_dfs_ref.c-fix-potential-memory-leakage.patch --- diff --git a/queue-3.4/fs-cifs-cifs_dfs_ref.c-fix-potential-memory-leakage.patch b/queue-3.4/fs-cifs-cifs_dfs_ref.c-fix-potential-memory-leakage.patch new file mode 100644 index 00000000000..8a20b9c2514 --- /dev/null +++ b/queue-3.4/fs-cifs-cifs_dfs_ref.c-fix-potential-memory-leakage.patch @@ -0,0 +1,34 @@ +From 10b8c7dff5d3633b69e77f57d404dab54ead3787 Mon Sep 17 00:00:00 2001 +From: Cong Ding +Date: Tue, 22 Jan 2013 19:20:58 -0500 +Subject: fs/cifs/cifs_dfs_ref.c: fix potential memory leakage + +From: Cong Ding + +commit 10b8c7dff5d3633b69e77f57d404dab54ead3787 upstream. + +When it goes to error through line 144, the memory allocated to *devname is +not freed, and the caller doesn't free it either in line 250. So we free the +memroy of *devname in function cifs_compose_mount_options() when it goes to +error. + +Signed-off-by: Cong Ding +Reviewed-by: Jeff Layton +Signed-off-by: Steve French +Signed-off-by: Greg Kroah-Hartman + +--- + fs/cifs/cifs_dfs_ref.c | 2 ++ + 1 file changed, 2 insertions(+) + +--- a/fs/cifs/cifs_dfs_ref.c ++++ b/fs/cifs/cifs_dfs_ref.c +@@ -226,6 +226,8 @@ compose_mount_options_out: + compose_mount_options_err: + kfree(mountdata); + mountdata = ERR_PTR(rc); ++ kfree(*devname); ++ *devname = NULL; + goto compose_mount_options_out; + } + diff --git a/queue-3.4/series b/queue-3.4/series index 575614ddb8f..9fbc4f0c222 100644 --- a/queue-3.4/series +++ b/queue-3.4/series @@ -1,3 +1,4 @@ can-c_can-fix-invalid-error-codes.patch can-ti_hecc-fix-invalid-error-codes.patch can-pch_can-fix-invalid-error-codes.patch +fs-cifs-cifs_dfs_ref.c-fix-potential-memory-leakage.patch