Re: [PATCH] jffs2:freely allocate memory when parameters are invalid
From: Al Viro
Date: Fri Sep 20 2019 - 07:45:54 EST
On Fri, Sep 20, 2019 at 02:54:38PM +0800, Xiaoming Ni wrote:
> Use kzalloc() to allocate memory in jffs2_fill_super().
> Freeing memory when jffs2_parse_options() fails will cause
> use-after-free and double-free in jffs2_kill_sb()
... so we are not freeing it there. What's the problem?