diff options
| author | Bjorn Andersson <[email protected]> | 2019-08-29 10:29:23 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2019-09-04 13:35:10 +0200 |
| commit | 2e369878bd4399283f2950dc4947cf44c857dd74 (patch) | |
| tree | e8b9e88d4965b37031bcfdf311e24316ddc917ce | |
| parent | 278d56f970ae6e0bcda8970e78e088e3efe43da8 (diff) | |
misc: fastrpc: Don't reference rpmsg_device after remove
As fastrpc_rpmsg_remove() returns the rpdev of the channel context is no
longer a valid object, so ensure to update the channel context to no
longer reference the old object and guard in the invoke code path
against dereferencing it.
Signed-off-by: Bjorn Andersson <[email protected]>
Signed-off-by: Mayank Chopra <[email protected]>
Signed-off-by: Abhinav Asati <[email protected]>
Signed-off-by: Vamsi Singamsetty <[email protected]>
Signed-off-by: Srinivas Kandagatla <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
| -rw-r--r-- | drivers/misc/fastrpc.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/drivers/misc/fastrpc.c b/drivers/misc/fastrpc.c index c019e867e7fa..59ee6de26229 100644 --- a/drivers/misc/fastrpc.c +++ b/drivers/misc/fastrpc.c @@ -913,6 +913,9 @@ static int fastrpc_internal_invoke(struct fastrpc_user *fl, u32 kernel, if (!fl->sctx) return -EINVAL; + if (!fl->cctx->rpdev) + return -EPIPE; + ctx = fastrpc_context_alloc(fl, kernel, sc, args); if (IS_ERR(ctx)) return PTR_ERR(ctx); @@ -1495,6 +1498,7 @@ static void fastrpc_rpmsg_remove(struct rpmsg_device *rpdev) misc_deregister(&cctx->miscdev); of_platform_depopulate(&rpdev->dev); + cctx->rpdev = NULL; fastrpc_channel_ctx_put(cctx); } |