Skip to content

Commit

Permalink
tty_port: Fix refcounting leak in tty_port_tty_hangup()
Browse files Browse the repository at this point in the history
The function tty_port_tty_hangup() could leak a reference to the tty_struct:

        struct tty_struct *tty = tty_port_tty_get(port);

        if (tty && (!check_clocal || !C_CLOCAL(tty))) {
                tty_hangup(tty);
                tty_kref_put(tty);
        }

If tty != NULL and the second condition is false we never call tty_kref_put and
the reference is leaked.

Fix by always calling tty_kref_put() which accepts a NULL argument.

The patch fixes a regression introduced by commit aa27a09.

Acked-by: Gustavo Padovan <[email protected]>
Signed-off-by: Gianluca Anzolin <[email protected]>
Acked-by: Jiri Slaby <[email protected]>
Cc: stable <[email protected]> # 3.10
Signed-off-by: Greg Kroah-Hartman <[email protected]>
  • Loading branch information
funnydog authored and gregkh committed Jul 26, 2013
1 parent 079a036 commit 1d9e689
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions drivers/tty/tty_port.c
Original file line number Diff line number Diff line change
Expand Up @@ -256,10 +256,9 @@ void tty_port_tty_hangup(struct tty_port *port, bool check_clocal)
{
struct tty_struct *tty = tty_port_tty_get(port);

if (tty && (!check_clocal || !C_CLOCAL(tty))) {
if (tty && (!check_clocal || !C_CLOCAL(tty)))
tty_hangup(tty);
tty_kref_put(tty);
}
tty_kref_put(tty);
}
EXPORT_SYMBOL_GPL(tty_port_tty_hangup);

Expand Down

0 comments on commit 1d9e689

Please sign in to comment.