diff options
| author | Cássio Gabriel <cassiogabrielcontato@gmail.com> | 2026-06-09 15:03:56 +0300 |
|---|---|---|
| committer | Mark Brown <broonie@kernel.org> | 2026-06-09 20:41:45 +0300 |
| commit | a750ca72af72dde9744468fdca6eda0b698a1cfc (patch) | |
| tree | b33e0226c4f354316fc0b1986704a37fc6e2a15b /include/linux/timerqueue.h | |
| parent | 9f0b311829eb58e0a0541d356f651ba4399aa765 (diff) | |
| download | linux-a750ca72af72dde9744468fdca6eda0b698a1cfc.tar.xz | |
ASoC: sma1307: Fix uevent string leaks in fault worker
sma1307_check_fault_worker() stores dynamically allocated uevent strings in
envp[0]. Several fault conditions are checked in sequence, so a later fault
can overwrite envp[0] before the final kfree() and leak the previous
allocation.
The same flow can leave an OT1 volume entry in envp[1] while envp[0]
has been overwritten by a later non-OT1 fault, causing an inconsistent
uevent payload.
Use static STATUS strings and a stack buffer for the optional VOLUME entry.
This removes the allocations from the worker and keeps VOLUME tied only
to the OT1 events that produce it.
Fixes: 576c57e6b4c1 ("ASoC: sma1307: Add driver for Iron Device SMA1307")
Signed-off-by: Cássio Gabriel <cassiogabrielcontato@gmail.com>
Link: https://patch.msgid.link/20260609-asoc-sma1307-uevent-leak-v1-1-cd7f5b062ab7@gmail.com
Signed-off-by: Mark Brown <broonie@kernel.org>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions
