diff options
| author | Dan Carpenter <dan.carpenter@linaro.org> | 2024-03-21 09:38:39 +0300 |
|---|---|---|
| committer | Linus Walleij <linus.walleij@linaro.org> | 2024-03-29 00:04:16 +0100 |
| commit | 5038a66dad0199de60e5671603ea6623eb9e5c79 (patch) | |
| tree | 9c70518b1454e4fe3f3a8ed8f8108817e3a92e54 /drivers | |
| parent | 368a90e651faeeb7049a876599cf2b0d74954796 (diff) | |
| download | linux-stable-5038a66dad0199de60e5671603ea6623eb9e5c79.tar.gz linux-stable-5038a66dad0199de60e5671603ea6623eb9e5c79.tar.bz2 linux-stable-5038a66dad0199de60e5671603ea6623eb9e5c79.zip | |
pinctrl: core: delete incorrect free in pinctrl_enable()
The "pctldev" struct is allocated in devm_pinctrl_register_and_init().
It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(),
so freeing it in pinctrl_enable() will lead to a double free.
The devm_pinctrl_dev_release() function frees the pindescs and destroys
the mutex as well.
Fixes: 6118714275f0 ("pinctrl: core: Fix pinctrl_register_and_init() with pinctrl_enable()")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Message-ID: <578fbe56-44e9-487c-ae95-29b695650f7c@moroto.mountain>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/pinctrl/core.c | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/drivers/pinctrl/core.c b/drivers/pinctrl/core.c index 6649357637ff..cffeb869130d 100644 --- a/drivers/pinctrl/core.c +++ b/drivers/pinctrl/core.c @@ -2124,13 +2124,7 @@ int pinctrl_enable(struct pinctrl_dev *pctldev) error = pinctrl_claim_hogs(pctldev); if (error) { - dev_err(pctldev->dev, "could not claim hogs: %i\n", - error); - pinctrl_free_pindescs(pctldev, pctldev->desc->pins, - pctldev->desc->npins); - mutex_destroy(&pctldev->mutex); - kfree(pctldev); - + dev_err(pctldev->dev, "could not claim hogs: %i\n", error); return error; } |