vfio: Clear the caps->buf to NULL after free
authorSchspa Shi <schspa@gmail.com>
Wed, 29 Jun 2022 02:29:48 +0000 (10:29 +0800)
committerAlex Williamson <alex.williamson@redhat.com>
Thu, 30 Jun 2022 17:01:14 +0000 (11:01 -0600)
commit6641085e8d7b3f061911517f79a2a15a0a21b97b
treef20b66e4a7bb9adfa519aa781f1482fba09ff6a9
parentd1877e639bc6bf1c3131eda3f9ede73f8da96c22
vfio: Clear the caps->buf to NULL after free

On buffer resize failure, vfio_info_cap_add() will free the buffer,
report zero for the size, and return -ENOMEM.  As additional
hardening, also clear the buffer pointer to prevent any chance of a
double free.

Signed-off-by: Schspa Shi <schspa@gmail.com>
Reviewed-by: Cornelia Huck <cohuck@redhat.com>
Link: https://lore.kernel.org/r/20220629022948.55608-1-schspa@gmail.com
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
drivers/vfio/vfio.c