Tag: f9692b2699bd82ae0df1d7d495d9fb9c4bd45ad9

firmware: fix possible use after free on name on asynchronous request

Author: Luis R. Rodriguez <mcgrof@suse.com> Asynchronous firmware loading copies the pointer to the name passed as an argument only to be scheduled later and used. This behaviour works well for synchronous calling but in asynchronous mode there’s a chance the caller could immediately free the passed string after making the asynchronous call. This could trigger …

Continue reading