Unverified Commit 7a4676b2 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9562 CVE-2024-38385 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liao Chen <liaochen4@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/EEEQHBHQONXC4V7KJAZGWFEACTUHRDCG/ 
genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()

dicken.ding (1):
  genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()


-- 
2.34.1
 
https://gitee.com/openeuler/kernel/issues/IA985V 
 
Link:https://gitee.com/openeuler/kernel/pulls/9562

 

Reviewed-by: default avatarZhang Jianhua <chris.zjh@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 307f7fa9 8a1045d9

kernel/irq/irqdesc.c

+4 −1
Original line number Diff line number Diff line
@@ -148,7 +148,10 @@ static int irq_find_free_area(unsigned int from, unsigned int cnt) 
static unsigned int irq_find_at_or_after(unsigned int offset)

{

	unsigned long index = offset;

	struct irq_desc *desc = mt_find(&sparse_irqs, &index, nr_irqs);

	struct irq_desc *desc;



	guard(rcu)();

	desc = mt_find(&sparse_irqs, &index, nr_irqs);



	return desc ? irq_desc_get_irq(desc) : nr_irqs;

}