Piteball/android_kernel_google_msm
1
0
Fork 0
mirror of https://github.com/followmsi/android_kernel_google_msm.git synced 2024-11-06 23:17:41 +00:00
Code Issues Projects Releases Wiki Activity

UPSTREAM: zsmalloc: fix a null pointer dereference in destroy_handle_cache()

Browse source 
(cherry-pick from commit 02f7b4145da113683ad64c74bf64605e16b71789)

If zs_create_pool()->create_handle_cache()->kmem_cache_create() or
pool->name allocation fails, zs_create_pool()->destroy_handle_cache()
will dereference the NULL pool->handle_cachep.

Modify destroy_handle_cache() to avoid this.

Bug: 25951511

Change-Id: Ie4ea82fe34ac02e6e2548e6ed47257366d7b92f5
Signed-off-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
Cc: Minchan Kim <minchan@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
Sergey Senozhatsky 2015-06-10 11:14:57 -07:00 committed by Artem Borisov
parent 2e20e8b40c
commit cfde7323cb
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
mm/zsmalloc.c
View file

@ -290,7 +290,8 @@ static int create_handle_cache(struct zs_pool *pool)
static void destroy_handle_cache(struct zs_pool *pool) static void destroy_handle_cache(struct zs_pool *pool)
{ {
kmem_cache_destroy(pool->handle_cachep); if (pool->handle_cachep)
kmem_cache_destroy(pool->handle_cachep);
} }
static unsigned long alloc_handle(struct zs_pool *pool) static unsigned long alloc_handle(struct zs_pool *pool)