Fedor Pchelkin c494365432 nfc: fix memory leak of se_io context in nfc_genl_se_io ... [ Upstream commit 25ff6f8a5a ] The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfc_genl_se_io and supposed to be eventually freed in se_io_cb callback function. However, there are several error paths where the bwi_timer is not charged to call se_io_cb later, and the cb_context is leaked. The patch proposes to free the cb_context explicitly on those error paths. At the moment we can't simply check 'dev->ops->se_io()' return value as it may be negative in both cases: when the timer was charged and was not. Fixes: 5ce3f32b52 ("NFC: netlink: SE API implementation") Reported-by: syzbot+df64c0a2e8d68e78a4fa@syzkaller.appspotmail.com Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru> Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-03-11 13:57:29 +01:00
..
hci	nfc: constify local pointer variables	2021-07-30 17:22:52 +02:00
nci	NFC: nci: Bounds check struct nfc_target arrays	2022-12-14 11:37:27 +01:00
Kconfig	net: remove redundant 'depends on NET'	2021-01-27 17:04:12 -08:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
af_nfc.c	nfc: fix error handling of nfc_proto_register()	2021-10-13 17:32:38 -07:00
core.c	NFC: NULL out the dev->rfkill to prevent UAF	2022-06-09 10:22:46 +02:00
digital.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288	2019-06-05 17:36:37 +02:00
digital_core.c	NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()	2021-10-13 17:44:29 -07:00
digital_dep.c	net:nfc:digital: Fix a double free in digital_tg_recv_dep_req	2021-04-27 15:36:10 -07:00
digital_technology.c	NFC: digital: fix possible memory leak in digital_in_send_sdd_req()	2021-10-13 17:44:29 -07:00
llcp.h	nfc: constify several pointers to u8, char and sk_buff	2021-07-30 17:22:52 +02:00
llcp_commands.c	nfc: constify several pointers to u8, char and sk_buff	2021-07-30 17:22:52 +02:00
llcp_core.c	net: nfc: Fix use-after-free in local_cleanup()	2023-02-01 08:27:08 +01:00
llcp_sock.c	nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()	2022-01-27 11:02:48 +01:00
netlink.c	nfc: fix memory leak of se_io context in nfc_genl_se_io	2023-03-11 13:57:29 +01:00
nfc.h	nfc: constify several pointers to u8, char and sk_buff	2021-07-30 17:22:52 +02:00
rawsock.c	net: in_irq() cleanup	2021-08-13 14:09:19 -07:00