]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
soundwire: debugfs: initialize firmware_file to empty string
authorGui-Dong Han <hanguidong02@gmail.com>
Mon, 23 Mar 2026 08:58:46 +0000 (16:58 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 Apr 2026 14:15:23 +0000 (16:15 +0200)
Passing NULL to debugfs_create_str() causes a NULL pointer dereference,
and creating debugfs nodes with NULL string pointers is no longer
permitted.

Additionally, firmware_file is a global pointer. Previously, adding every
new slave blindly overwrote it with NULL.

Fix these issues by initializing firmware_file to an allocated empty
string once in the subsystem init path (sdw_debugfs_init), and freeing
it in the exit path. Existing driver code handles empty strings
correctly.

Fixes: fe46d2a4301d ("soundwire: debugfs: add interface to read/write commands")
Reported-by: yangshiguang <yangshiguang@xiaomi.com>
Closes: https://lore.kernel.org/lkml/17647e4c.d461.19b46144a4e.Coremail.yangshiguang1011@163.com/
Signed-off-by: Gui-Dong Han <hanguidong02@gmail.com>
Link: https://patch.msgid.link/20260323085930.88894-4-hanguidong02@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/soundwire/debugfs.c

index ccc9670ef77ce1d51c5560458d3e6b39e7b9f0e1..2905ec19b83844153e3984f76aaa96b1bc4e31ce 100644 (file)
@@ -358,8 +358,8 @@ void sdw_slave_debugfs_init(struct sdw_slave *slave)
        debugfs_create_file("go", 0200, d, slave, &cmd_go_fops);
 
        debugfs_create_file("read_buffer", 0400, d, slave, &read_buffer_fops);
-       firmware_file = NULL;
-       debugfs_create_str("firmware_file", 0200, d, &firmware_file);
+       if (firmware_file)
+               debugfs_create_str("firmware_file", 0200, d, &firmware_file);
 
        slave->debugfs = d;
 }
@@ -371,10 +371,15 @@ void sdw_slave_debugfs_exit(struct sdw_slave *slave)
 
 void sdw_debugfs_init(void)
 {
+       if (!firmware_file)
+               firmware_file = kstrdup("", GFP_KERNEL);
+
        sdw_debugfs_root = debugfs_create_dir("soundwire", NULL);
 }
 
 void sdw_debugfs_exit(void)
 {
        debugfs_remove_recursive(sdw_debugfs_root);
+       kfree(firmware_file);
+       firmware_file = NULL;
 }