Thread (3 messages) 3 messages, 3 authors, 2021-01-22

Re: [PATCH] pinctrl: sunxi: fix use-after-free in sunxi_pmx_free()

From: Linus Walleij <hidden>
Date: 2021-01-22 22:55:50
Also in: linux-gpio, lkml

On Thu, Jan 21, 2021 at 5:40 PM Maxime Ripard [off-list ref] wrote:
On Tue, Jan 19, 2021 at 02:29:08PM +0800, Liu Xiang wrote:
quoted
When CONFIG_REGULATOR is not set, sunxi_pmx_request() always return
success. Even a group of pins call sunxi_pmx_request(), the refcount
is only 1. This can cause a use-after-free warning in sunxi_pmx_free().
To solve this problem, go to err path if regulator_get() return NULL
or error.

Signed-off-by: Liu Xiang <redacted>
Is there any drawback to depending on CONFIG_REGULATOR?

Given that we need those regulators enabled anyway, I guess we could
just select or depends on it
I agree.

Liu can you make a patch to Kconfig to just select REGULATOR?
Possibly even the specific regulator driver this SoC is using
if it is very specific for this purpose.

Yours,
Linus Walleij

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help