Files
linux/drivers/reset
Geert Uytterhoeven b9871e2111 reset: Fix potential use-after-free in __of_reset_control_get()
[ Upstream commit b790c8ea55 ]

Calling of_node_put() decreases the reference count of a device tree
object, and may free some data.

However, the of_phandle_args structure embedding it is passed to
reset_controller_dev.of_xlate() after that, so it may still be accessed.

Move the call to of_node_put() down to fix this.

Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
[p.zabel@pengutronix.de: moved of_node_put after mutex_unlock]
Signed-off-by: Philipp Zabel <p.zabel@pengutronix.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-15 15:12:21 +09:00
..
2016-08-30 17:08:51 +02:00