Re: [PATCH] jffs2:freely allocate memory when parameters are invalid

From: Al Viro
Date: Fri Sep 20 2019 - 07:45:54 EST


On Fri, Sep 20, 2019 at 02:54:38PM +0800, Xiaoming Ni wrote:
> Use kzalloc() to allocate memory in jffs2_fill_super().
> Freeing memory when jffs2_parse_options() fails will cause
> use-after-free and double-free in jffs2_kill_sb()

... so we are not freeing it there. What's the problem?