mirror of https://github.com/torvalds/linux.git
e07dea3de5
The for_each_available_child_of_node() calls of_node_put() to
release child_np in each success loop. After breaking from the
loop with the child_np has been released, the code will jump to
the put_child label and will call the of_node_put() again if the
devm_request_threaded_irq() fails. These cause a double free bug.
Fix by returning directly to avoid the duplicate of_node_put().
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| phy-rockchip-dp.c | ||
| phy-rockchip-dphy-rx0.c | ||
| phy-rockchip-emmc.c | ||
| phy-rockchip-inno-csidphy.c | ||
| phy-rockchip-inno-dsidphy.c | ||
| phy-rockchip-inno-hdmi.c | ||
| phy-rockchip-inno-usb2.c | ||
| phy-rockchip-naneng-combphy.c | ||
| phy-rockchip-pcie.c | ||
| phy-rockchip-samsung-dcphy.c | ||
| phy-rockchip-samsung-hdptx.c | ||
| phy-rockchip-snps-pcie3.c | ||
| phy-rockchip-typec.c | ||
| phy-rockchip-usb.c | ||
| phy-rockchip-usbdp.c | ||