By supplying ioctl()s in the wrong order, a userspace client was able to trigger NULL pointer dereferences. Furthermore, by calling ioctl_create_iso_context more than once, new contexts could be created without ever freeing the previously created contexts. Thanks to Anders Blomdell for the report. Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de> |
||
|---|---|---|
| .. | ||
| fw-card.c | ||
| fw-cdev.c | ||
| fw-device.c | ||
| fw-device.h | ||
| fw-iso.c | ||
| fw-ohci.c | ||
| fw-ohci.h | ||
| fw-sbp2.c | ||
| fw-topology.c | ||
| fw-topology.h | ||
| fw-transaction.c | ||
| fw-transaction.h | ||
| Kconfig | ||
| Makefile | ||