[U-Boot] [PATCH 2/5] CVE-2019-13105: ext4: fix double-free in ext4_cache_read

Tom Rini trini at konsulko.com
Thu Jul 18 23:58:51 UTC 2019


On Mon, Jul 08, 2019 at 04:37:04PM -0700, Paul Emge wrote:

> ext_cache_read doesn't null cache->buf, after freeing, which results
> in a later function double-freeing it. This patch fixes
> ext_cache_read to call ext_cache_fini instead of free.
> 
> Signed-off-by: Paul Emge <paulemge at forallsecure.com>

Applied to u-boot/master, thanks!

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20190718/be718130/attachment.sig>


More information about the U-Boot mailing list