]> www.infradead.org Git - users/dwmw2/linux.git/commitdiff
iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
authorArtem Chernyshev <artem.chernyshev@red-soft.ru>
Tue, 16 Jul 2024 12:55:14 +0000 (15:55 +0300)
committerWill Deacon <will@kernel.org>
Tue, 23 Jul 2024 16:09:28 +0000 (17:09 +0100)
In sprd_iommu_cleanup() before calling function sprd_iommu_hw_en()
dom->sdev is equal to NULL, which leads to null dereference.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 9afea57384d4 ("iommu/sprd: Release dma buffer to avoid memory leak")
Signed-off-by: Artem Chernyshev <artem.chernyshev@red-soft.ru>
Reviewed-by: Chunyan Zhang <zhang.lyra@gmail.com>
Link: https://lore.kernel.org/r/20240716125522.3690358-1-artem.chernyshev@red-soft.ru
Signed-off-by: Will Deacon <will@kernel.org>
drivers/iommu/sprd-iommu.c

index ba53571a823905bcd00170506260cd918f967c33..a2f4ffe6d9491c1e495439cd031592dacbdaef1b 100644 (file)
@@ -232,8 +232,8 @@ static void sprd_iommu_cleanup(struct sprd_iommu_domain *dom)
 
        pgt_size = sprd_iommu_pgt_size(&dom->domain);
        dma_free_coherent(dom->sdev->dev, pgt_size, dom->pgt_va, dom->pgt_pa);
-       dom->sdev = NULL;
        sprd_iommu_hw_en(dom->sdev, false);
+       dom->sdev = NULL;
 }
 
 static void sprd_iommu_domain_free(struct iommu_domain *domain)