]> git.baikalelectronics.ru Git - kernel.git/commit
net: phy: Fix use after free in phy_detach()
authorGeert Uytterhoeven <geert+renesas@glider.be>
Mon, 28 Nov 2016 14:18:31 +0000 (15:18 +0100)
committerDavid S. Miller <davem@davemloft.net>
Wed, 30 Nov 2016 01:35:24 +0000 (20:35 -0500)
commit3e1c2e44887ee410e9518fbb7ace1ce8b14efae6
treee944e0663f0535a97b35bfb0cb69bbe6ea89320e
parent43273a6f22ca6443436b54289aef6423b224c4d5
net: phy: Fix use after free in phy_detach()

If device_release_driver(&phydev->mdio.dev) is called, it releases all
resources belonging to the PHY device. Hence the subsequent call to
phy_led_triggers_unregister() will access already freed memory when
unregistering the LEDs.

Move the call to phy_led_triggers_unregister() before the possible call
to device_release_driver() to fix this.

Fixes: 9fe4f375929aee86 ("net: phy: leds: add support for led triggers on phy link state change")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Tested-by: Zach Brown <zach.brown@ni.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/phy/phy_device.c