Unverified Commit 781e8dae authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15806 bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Tirui Yin <yintirui@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/MFE62E7DETRPW52T6OWK6SZTLVH6Q2IN/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBP74W 
 
Link:https://gitee.com/openeuler/kernel/pulls/15806

 

Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents c6c380ca ce3cc16a

drivers/bus/fsl-mc/fsl-mc-bus.c

+3 −3
Original line number Diff line number Diff line
@@ -878,14 +878,14 @@ static int fsl_mc_bus_probe(struct platform_device *pdev) 
static int fsl_mc_bus_remove(struct platform_device *pdev)

{

	struct fsl_mc *mc = platform_get_drvdata(pdev);

	struct fsl_mc_io *mc_io;



	if (!fsl_mc_is_root_dprc(&mc->root_mc_bus_dev->dev))

		return -EINVAL;



	mc_io = mc->root_mc_bus_dev->mc_io;

	fsl_mc_device_remove(mc->root_mc_bus_dev);



	fsl_destroy_mc_io(mc->root_mc_bus_dev->mc_io);

	mc->root_mc_bus_dev->mc_io = NULL;

	fsl_destroy_mc_io(mc_io);



	return 0;

}