|
 |
7f35254 |
If on iwl_dump_nic_event_log() error occurs before that function
|
|
|
7f35254 |
initialize buf, we process uninitiated pointer in
|
|
|
7f35254 |
iwl_dbgfs_log_event_read() and can hit "BUG at mm/slub.c:3409"
|
|
|
7f35254 |
|
|
|
7f35254 |
Resolves:
|
|
|
7f35254 |
https://bugzilla.redhat.com/show_bug.cgi?id=951241
|
|
|
7f35254 |
|
|
|
7f35254 |
Reported-by: ian.odette@eprize.com
|
|
|
7f35254 |
Cc: stable@vger.kernel.org
|
|
|
7f35254 |
Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
|
|
|
7f35254 |
---
|
|
|
7f35254 |
Patch is only compile tested, but I'm sure it fixes the problem.
|
|
|
7f35254 |
|
|
|
7f35254 |
drivers/net/wireless/iwlwifi/dvm/debugfs.c | 16 ++++++++--------
|
|
|
7f35254 |
1 file changed, 8 insertions(+), 8 deletions(-)
|
|
|
7f35254 |
|
|
|
7f35254 |
diff --git a/drivers/net/wireless/iwlwifi/dvm/debugfs.c b/drivers/net/wireless/iwlwifi/dvm/debugfs.c
|
|
|
7f35254 |
index 7b8178b..cb6dd58 100644
|
|
|
7f35254 |
--- a/drivers/net/wireless/iwlwifi/dvm/debugfs.c
|
|
|
7f35254 |
+++ b/drivers/net/wireless/iwlwifi/dvm/debugfs.c
|
|
|
7f35254 |
@@ -2237,15 +2237,15 @@ static ssize_t iwl_dbgfs_log_event_read(struct file *file,
|
|
|
7f35254 |
size_t count, loff_t *ppos)
|
|
|
7f35254 |
{
|
|
|
7f35254 |
struct iwl_priv *priv = file->private_data;
|
|
|
7f35254 |
- char *buf;
|
|
|
7f35254 |
- int pos = 0;
|
|
|
7f35254 |
- ssize_t ret = -ENOMEM;
|
|
|
7f35254 |
+ char *buf = NULL;
|
|
|
7f35254 |
+ ssize_t ret;
|
|
|
7f35254 |
|
|
|
7f35254 |
- ret = pos = iwl_dump_nic_event_log(priv, true, &buf, true);
|
|
|
7f35254 |
- if (buf) {
|
|
|
7f35254 |
- ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
|
|
|
7f35254 |
- kfree(buf);
|
|
|
7f35254 |
- }
|
|
|
7f35254 |
+ ret = iwl_dump_nic_event_log(priv, true, &buf, true);
|
|
|
7f35254 |
+ if (ret < 0)
|
|
|
7f35254 |
+ goto err;
|
|
|
7f35254 |
+ ret = simple_read_from_buffer(user_buf, count, ppos, buf, ret);
|
|
|
7f35254 |
+err:
|
|
|
7f35254 |
+ kfree(buf);
|
|
|
7f35254 |
return ret;
|
|
|
7f35254 |
}
|
|
|
7f35254 |
|
|
|
7f35254 |
--
|
|
|
7f35254 |
1.7.11.7
|
|
|
7f35254 |
|
|
|
7f35254 |
--
|
|
|
7f35254 |
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
|
|
|
7f35254 |
the body of a message to majordomo@vger.kernel.org
|
|
|
7f35254 |
More majordomo info at http://vger.kernel.org/majordomo-info.html
|