mirror of https://github.com/torvalds/linux.git
ef3e73a917
pseries_msi_ops_teardown() reads pci_dev* from msi_alloc_info_t. However, pseries_msi_ops_prepare() does not populate this structure, thus it is all zeros. Consequently, pseries_msi_ops_teardown() triggers a NULL pointer dereference crash. struct pci_dev is available in struct irq_domain. Read it there instead. Reported-by: Venkat Rao Bagalkote <venkat88@linux.ibm.com> Closes: https://lore.kernel.org/linuxppc-dev/878d7651-433a-46fe-a28b-1b7e893fcbe0@linux.ibm.com/ Tested-by: Venkat Rao Bagalkote <venkat88@linux.ibm.com> Signed-off-by: Nam Cao <namcao@linutronix.de> Signed-off-by: Madhavan Srinivasan <maddy@linux.ibm.com> Link: https://patch.msgid.link/20251010120307.3281720-1-namcao@linutronix.de |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| cc_platform.c | ||
| cmm.c | ||
| dlpar.c | ||
| dtl.c | ||
| eeh_pseries.c | ||
| event_sources.c | ||
| firmware.c | ||
| hotplug-cpu.c | ||
| hotplug-memory.c | ||
| htmdump.c | ||
| hvCall.S | ||
| hvCall_inst.c | ||
| hvconsole.c | ||
| hvcserver.c | ||
| ibmebus.c | ||
| io_event_irq.c | ||
| iommu.c | ||
| kexec.c | ||
| lpar.c | ||
| lparcfg.c | ||
| mobility.c | ||
| msi.c | ||
| nvram.c | ||
| of_helpers.c | ||
| of_helpers.h | ||
| papr-hvpipe.c | ||
| papr-hvpipe.h | ||
| papr-indices.c | ||
| papr-phy-attest.c | ||
| papr-platform-dump.c | ||
| papr-rtas-common.c | ||
| papr-rtas-common.h | ||
| papr-sysparm.c | ||
| papr-vpd.c | ||
| papr_platform_attributes.c | ||
| papr_scm.c | ||
| pci.c | ||
| pci_dlpar.c | ||
| plpks-secvar.c | ||
| plpks.c | ||
| plpks_sed_ops.c | ||
| pmem.c | ||
| power.c | ||
| pseries.h | ||
| pseries_energy.c | ||
| ras.c | ||
| reconfig.c | ||
| rng.c | ||
| rtas-fadump.c | ||
| rtas-fadump.h | ||
| rtas-work-area.c | ||
| setup.c | ||
| smp.c | ||
| suspend.c | ||
| svm.c | ||
| vas-sysfs.c | ||
| vas.c | ||
| vas.h | ||
| vio.c | ||
| vphn.c | ||