From: Wen Yang <wen.yan...@zte.com.cn>
Date: Sat, 6 Jul 2019 11:38:41 +0800

> There is a possible use-after-free issue in the axienet_probe():
> 
> 1701: np = of_parse_phandle(pdev->dev.of_node, "axistream-connected", 0);
> 1702:   if (np) {
> ...
> 1787:         of_node_put(np); ---> released here
> 1788:         lp->eth_irq = platform_get_irq(pdev, 0);
> 1789: } else {
> ...
> 1801: }
> 1802: if (IS_ERR(lp->dma_regs)) {
> ...
> 1805:         of_node_put(np); ---> double released here
> 1806:         goto free_netdev;
> 1807: }
> 
> We solve this problem by removing the unnecessary of_node_put().
> 
> Fixes: 28ef9ebdb64c ("net: axienet: make use of axistream-connected attribute 
> optional")
> Signed-off-by: Wen Yang <wen.yan...@zte.com.cn>

Applied to net-next

Reply via email to