Re: [PATCH] mmc: block: fix free of uninitialized 'idata->buf'

From: Ulf Hansson
Date: Mon Jul 18 2016 - 07:19:46 EST


On 12 July 2016 at 12:07, Ulf Hansson <ulf.hansson@xxxxxxxxxx> wrote:
> + stable
>
> On 8 July 2016 at 17:27, Ville Viinikka <ville@xxxxxxxxxx> wrote:
>> Set 'idata->buf' to NULL so that it never gets returned without
>> initialization. This fixes a bug where mmc_blk_ioctl_cmd() would
>> free both 'idata' and 'idata->buf' but 'idata->buf' was returned
>> uninitialized.
>>
>> Fixes: 1ff8950c0433 ("mmc: block: change to use kmalloc when copy data from userspace")
>> Signed-off-by: Ville Viinikka <ville@xxxxxxxxxx>
>
> I added a stable tag to this and applied it for next!

Moved this to fixes!

Kind regards
Uffe