From: Krzysztof Kozlowski Date: Wed, 19 Jun 2019 12:42:39 +0000 (+0200) Subject: regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure X-Git-Tag: v5.1.20~105 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a10d287f32d1d3fd34ce6c8c3e76ee71d8327f80;p=thirdparty%2Fkernel%2Fstable.git regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure commit 70ca117b02f3b1c8830fe95e4e3dea2937038e11 upstream. If devm_gpiod_get_from_of_node() call returns ERR_PTR, it is assigned into an array of GPIO descriptors and used later because such error is not treated as critical thus it is not propagated back to the probe function. All code later expects that such GPIO descriptor is either a NULL or proper value. This later might lead to dereference of ERR_PTR. Only devices with S2MPS14 flavor are affected (other do not control regulators with GPIOs). Fixes: 1c984942f0a4 ("regulator: s2mps11: Pass descriptor instead of GPIO number") Cc: Signed-off-by: Krzysztof Kozlowski Signed-off-by: Mark Brown Signed-off-by: Greg Kroah-Hartman --- diff --git a/drivers/regulator/s2mps11.c b/drivers/regulator/s2mps11.c index b518a81f75a32..209d1ff9089c5 100644 --- a/drivers/regulator/s2mps11.c +++ b/drivers/regulator/s2mps11.c @@ -826,6 +826,7 @@ static void s2mps14_pmic_dt_parse_ext_control_gpio(struct platform_device *pdev, else if (IS_ERR(gpio[reg])) { dev_err(&pdev->dev, "Failed to get control GPIO for %d/%s\n", reg, rdata[reg].name); + gpio[reg] = NULL; continue; } if (gpio[reg])