Commit 7b49d466 authored by Sudeep Holla's avatar Sudeep Holla Committed by Zheng Zengkai
Browse files

firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

stable inclusion
from stable-v5.10.137
commit 08272646cd7c310642c39b7f54348fddd7987643
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I60PLB

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=08272646cd7c310642c39b7f54348fddd7987643

--------------------------------

[ Upstream commit 689640ef ]

When scpi probe fails, at any point, we need to ensure that the scpi_info
is not set and will remain NULL until the probe succeeds. If it is not
taken care, then it could result use-after-free as the value is exported
via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc()
but freed when the probe fails.

Link: https://lore.kernel.org/r/20220701160310.148344-1-sudeep.holla@arm.com


Cc: stable@vger.kernel.org # 4.19+
Reported-by: default avatarhuhai <huhai@kylinos.cn>
Reviewed-by: default avatarJackie Liu <liuyun01@kylinos.cn>
Signed-off-by: default avatarSudeep Holla <sudeep.holla@arm.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarZheng Zengkai <zhengzengkai@huawei.com>
Reviewed-by: default avatarWei Li <liwei391@huawei.com>
parent 499afa4f
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment