HSI: core: Fix return freed object in hsi_new_client
authorChengfeng Ye <cyeaa@connect.ust.hk>
Fri, 5 Nov 2021 13:45:07 +0000 (06:45 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Jan 2022 10:04:31 +0000 (11:04 +0100)
commit0c3df095fab62e22b018e1c455f75c25062b4a32
treeb8474d631ce7429ded2c86c21cdc4cdb0d7975d1
parent8c124608bf46dc450cbe71dc713aa82159349bd2
HSI: core: Fix return freed object in hsi_new_client

[ Upstream commit a1ee1c08fcd5af03187dcd41dcab12fd5b379555 ]

cl is freed on error of calling device_register, but this
object is return later, which will cause uaf issue. Fix it
by return NULL on error.

Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk>
Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/hsi/hsi_core.c