[PATCH linux dev-4.10 0/2] drivers: sbefifo and occ-hwmon: Fix memory corruption

Eddie James eajames at linux.vnet.ibm.com
Fri Oct 27 07:15:11 AEDT 2017


From: "Edward A. James" <eajames at us.ibm.com>

There was some potential for bad memory access in the sbefifo driver. List
iteration will access the current position iterator, which in some cases in the
sbefifo driver was freed. Use a safe loop and delete the member from the list
first.

The second, more severe, problem was an incorrect amount of memory allocated
for the extended sensor attributes in the occ-hwmon driver. That was my mistake
in initially adding the extended attributes. I suppose we haven't hit much
memory corruption because the occ doesn't normally return extended sensors.

Edward A. James (2):
  drivers (fsi): sbefifo: Fix xfr deletion in lists
  drivers (hwmon): occ: Fix memory allocation for extended sensors

 drivers/fsi/fsi-sbefifo.c  | 19 ++++++++++++-------
 drivers/hwmon/occ/common.c |  2 +-
 2 files changed, 13 insertions(+), 8 deletions(-)

-- 
1.8.3.1



More information about the openbmc mailing list