]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
rpmsg: glink: Release driver_override
authorBjorn Andersson <quic_bjorande@quicinc.com>
Tue, 31 Oct 2023 11:25:39 +0000 (11:25 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 8 Nov 2023 16:26:44 +0000 (17:26 +0100)
commit fb80ef67e8ff6a00d3faad4cb348dafdb8eccfd8 upstream.

Upon termination of the rpmsg_device, driver_override needs to be freed
to avoid leaking the potentially assigned string.

Fixes: 42cd402b8fd4 ("rpmsg: Fix kfree() of static memory on setting driver_override")
Fixes: 39e47767ec9b ("rpmsg: Add driver_override device attribute for rpmsg_device")
Reviewed-by: Chris Lew <quic_clew@quicinc.com>
Signed-off-by: Bjorn Andersson <quic_bjorande@quicinc.com>
Signed-off-by: Bjorn Andersson <andersson@kernel.org>
Link: https://lore.kernel.org/r/20230109223931.1706429-1-quic_bjorande@quicinc.com
Signed-off-by: Lee Jones <lee@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/rpmsg/qcom_glink_native.c

index d37fd1f431fe461147fa722ef748354989e6744e..35e7291aa9696f13b7d9179c45f29556e0af7d69 100644 (file)
@@ -1395,6 +1395,7 @@ static void qcom_glink_rpdev_release(struct device *dev)
        struct glink_channel *channel = to_glink_channel(rpdev->ept);
 
        channel->rpdev = NULL;
+       kfree(rpdev->driver_override);
        kfree(rpdev);
 }
 
@@ -1623,6 +1624,7 @@ static void qcom_glink_device_release(struct device *dev)
 
        /* Release qcom_glink_alloc_channel() reference */
        kref_put(&channel->refcount, qcom_glink_channel_release);
+       kfree(rpdev->driver_override);
        kfree(rpdev);
 }