]> git.baikalelectronics.ru Git - kernel.git/commit
iio: trigger: Fix reference counting
authorLars-Peter Clausen <lars@metafoo.de>
Sun, 24 Oct 2021 09:27:00 +0000 (11:27 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 14 Dec 2021 09:57:20 +0000 (10:57 +0100)
commit45712abdee090a2044ff48d9b34574f889f8d81b
tree7d0ff69551da62742f9891d1020b92e1cc884e1a
parent20d4af7b5f32567db69bd9091a37796625dc9f06
iio: trigger: Fix reference counting

commit 8cbd87e73bcb16a54d4a0a2fc21f189e8b4919fa upstream.

In viio_trigger_alloc() device_initialize() is used to set the initial
reference count of the trigger to 1. Then another get_device() is called on
trigger. This sets the reference count to 2 before the trigger is returned.

iio_trigger_free(), which is the matching API to viio_trigger_alloc(),
calls put_device() which decreases the reference count by 1. But the second
reference count acquired in viio_trigger_alloc() is never dropped.

As a result the iio_trigger_release() function is never called and the
memory associated with the trigger is never freed.

Since there is no reason for the trigger to start its lifetime with two
reference counts just remove the extra get_device() in
viio_trigger_alloc().

Fixes: 6c3d381a0206 ("staging:iio:triggers. Add a reference get to the core for triggers.")
Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
Acked-by: Nuno Sá <nuno.sa@analog.com>
Link: https://lore.kernel.org/r/20211024092700.6844-2-lars@metafoo.de
Cc: <Stable@vger.kernel.org>
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/iio/industrialio-trigger.c