OSDN Git Service

NFC: st21nfca: fix double free
authorPan Bian <bianpan2016@163.com>
Thu, 7 Nov 2019 01:33:20 +0000 (09:33 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 12 Nov 2019 18:13:16 +0000 (19:13 +0100)
commit0c5f54da33876d187bd6baca050c7f980144248f
treecea8893272f30a8cb231f7f9d196f8797d18372e
parenta5f9f1aca5d55a986e3faf648c7067d9ae24574f
NFC: st21nfca: fix double free

[ Upstream commit 99a8efbb6e30b72ac98cecf81103f847abffb1e5 ]

The variable nfcid_skb is not changed in the callee nfc_hci_get_param()
if error occurs. Consequently, the freed variable nfcid_skb will be
freed again, resulting in a double free bug. Set nfcid_skb to NULL after
releasing it to fix the bug.

Signed-off-by: Pan Bian <bianpan2016@163.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/nfc/st21nfca/core.c