Searched hist:7371944 (Results 1 – 1 of 1) sorted by relevance
| /openbmc/u-boot/drivers/mtd/spi/ |
| H A D | sf_probe.c | 7371944a Sun Dec 02 03:54:31 CST 2018 Boris Brezillon <boris.brezillon@bootlin.com> mtd: sf: Unregister the MTD device prior to removing the spi_flash obj
The DM implementation of spi_flash_free() does not unregister the MTD
device before removing the spi dev object. This leads to a use-after-free
bug when the MTD device is later accessed by a MTD user (observed when
attaching the device to UBI after env_sf_load() has called
spi_flash_free()).
Implement ->remove() and call spi_flash_mtd_unregister() from there.
Fixes: 9fe6d8716e09 ("mtd, spi: Add MTD layer driver")
Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com>
Tested-by: Heiko Schocher <hs@denx.de>
Reviewed-by: Jagan Teki <jagan@openedev.com>
|