-
由 Gen Zhang 提交于
mainline inclusion from mainline-5.3 commit 84ecc2f6eb1cb12e6d44818f94fa49b50f06e6ac category: bugfix bugzilla: 13690 CVE: CVE-2019-12379 ------------------------------------------------- In function con_insert_unipair(), when allocation for p2 and p1[n] fails, ENOMEM is returned, but previously allocated p1 is not freed, remains as leaking memory. Thus we should free p1 as well when this allocation fails. Signed-off-by: NGen Zhang <blackgod016574@gmail.com> Reviewed-by: NKees Cook <keescook@chromium.org> Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: NYang Yingliang <yangyingliang@huawei.com> Reviewed-by: NYue Haibing <yuehaibing@huawei.com> Signed-off-by: NYang Yingliang <yangyingliang@huawei.com>
aa4f40fe