]> git.baikalelectronics.ru Git - kernel.git/commit
net: phy: Fix use after free in phy_detach()
authorGeert Uytterhoeven <geert+renesas@glider.be>
Mon, 28 Nov 2016 14:18:31 +0000 (15:18 +0100)
committerDavid S. Miller <davem@davemloft.net>
Wed, 30 Nov 2016 01:35:24 +0000 (20:35 -0500)
commit7f603d7e835deb800d9fd16d5cf1c4828c1e3b6e
treee944e0663f0535a97b35bfb0cb69bbe6ea89320e
parentf0fdebfff7b7b774f46556c4379848a95d2db202
net: phy: Fix use after free in phy_detach()

If device_release_driver(&phydev->mdio.dev) is called, it releases all
resources belonging to the PHY device. Hence the subsequent call to
phy_led_triggers_unregister() will access already freed memory when
unregistering the LEDs.

Move the call to phy_led_triggers_unregister() before the possible call
to device_release_driver() to fix this.

Fixes: facbc19d77f41107 ("net: phy: leds: add support for led triggers on phy link state change")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Tested-by: Zach Brown <zach.brown@ni.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/phy/phy_device.c