Unverified Commit 0d616a77 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15379 bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Tirui Yin <yintirui@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/LQZ3UCTYN33IKAAZWBR3W3D5AFWCF6ZN/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBP74W 
 
Link:https://gitee.com/openeuler/kernel/pulls/15379

 

Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 261e0bd2 5ceb63c0

drivers/bus/fsl-mc/fsl-mc-bus.c

+3 −3
Original line number Diff line number Diff line
@@ -1080,14 +1080,14 @@ static int fsl_mc_bus_probe(struct platform_device *pdev) 
static int fsl_mc_bus_remove(struct platform_device *pdev)

{

	struct fsl_mc *mc = platform_get_drvdata(pdev);

	struct fsl_mc_io *mc_io;



	if (!fsl_mc_is_root_dprc(&mc->root_mc_bus_dev->dev))

		return -EINVAL;



	mc_io = mc->root_mc_bus_dev->mc_io;

	fsl_mc_device_remove(mc->root_mc_bus_dev);



	fsl_destroy_mc_io(mc->root_mc_bus_dev->mc_io);

	mc->root_mc_bus_dev->mc_io = NULL;

	fsl_destroy_mc_io(mc_io);



	return 0;

}