From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 23CDE26B092; Thu, 13 Feb 2025 15:15:37 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739459737; cv=none; b=JUiwgWXP+W3psLn71HUuANe2OJ/lBSxd7wVG2Z0eSlsS1DDhXfknVqkShaZhq1TydmwW0PZX/V04+hmEwNxjzxD22585oOI2RkgNSyGEVoUt5pL7W19g6mhYyKkoHP04Sq6cFS3QuMvOP2mBC66PPpQkYpCYpYMkrlV2itRK/XA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739459737; c=relaxed/simple; bh=gdPs3hpdmB0ZOWDc4hyoe1wGWbtYXeSAVUvAQPWsGYo=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Kr7hdNvqBTNlhAGPAyTeYHOE0j4V0Jv9/SC3q1j6qgt4TDOB3ThlAas5BxSdf568es+lBMIjB69sd0xLPgTnCCn5YGXatr7YeZ7R+lAPZfxMUQwk1n5xS1aXKd7yBy1BPnLvGXqDRLYsftSn4KUdTc0YdXUeMxYcxvJkSruvDIA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=hd04eqOj; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="hd04eqOj" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 95882C4CEE4; Thu, 13 Feb 2025 15:15:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1739459737; bh=gdPs3hpdmB0ZOWDc4hyoe1wGWbtYXeSAVUvAQPWsGYo=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=hd04eqOjMcOH9G3RKV5ld0r0167rvDFRg92p065jZecidFRunPX+FZw0QNEnuatTX wfLGEE6L9yOW4Hy4Y94Jrx9wCzLznJTWRnjYW/zk5U5kbu7slVT9ZrAElAw/TogoQG l58TsmLrmNJZM4fesio6XzW1HbKNujbg5uIHmils= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, Sakari Ailus , Mehdi Djait , Mauro Carvalho Chehab Subject: [PATCH 6.13 342/443] media: ccs: Clean up parsed CCS static data on parse failure Date: Thu, 13 Feb 2025 15:28:27 +0100 Message-ID: <20250213142453.819350631@linuxfoundation.org> X-Mailer: git-send-email 2.48.1 In-Reply-To: <20250213142440.609878115@linuxfoundation.org> References: <20250213142440.609878115@linuxfoundation.org> User-Agent: quilt/0.68 X-stable: review X-Patchwork-Hint: ignore Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit 6.13-stable review patch. If anyone has any objections, please let me know. ------------------ From: Sakari Ailus commit da73efa8e675a2b58f1c7ae61201acfe57714bf7 upstream. ccs_data_parse() releases the allocated in-memory data structure when the parser fails, but it does not clean up parsed metadata that is there to help access the actual data. Do that, in order to return the data structure in a sane state. Fixes: a6b396f410b1 ("media: ccs: Add CCS static data parser library") Cc: stable@vger.kernel.org Signed-off-by: Sakari Ailus Reviewed-by: Mehdi Djait Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Greg Kroah-Hartman --- drivers/media/i2c/ccs/ccs-data.c | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) --- a/drivers/media/i2c/ccs/ccs-data.c +++ b/drivers/media/i2c/ccs/ccs-data.c @@ -10,6 +10,7 @@ #include #include #include +#include #include "ccs-data-defs.h" @@ -948,15 +949,15 @@ int ccs_data_parse(struct ccs_data_conta rval = __ccs_data_parse(&bin, ccsdata, data, len, dev, verbose); if (rval) - return rval; + goto out_cleanup; rval = bin_backing_alloc(&bin); if (rval) - return rval; + goto out_cleanup; rval = __ccs_data_parse(&bin, ccsdata, data, len, dev, false); if (rval) - goto out_free; + goto out_cleanup; if (verbose && ccsdata->version) print_ccs_data_version(dev, ccsdata->version); @@ -965,15 +966,16 @@ int ccs_data_parse(struct ccs_data_conta rval = -EPROTO; dev_dbg(dev, "parsing mismatch; base %p; now %p; end %p\n", bin.base, bin.now, bin.end); - goto out_free; + goto out_cleanup; } ccsdata->backing = bin.base; return 0; -out_free: +out_cleanup: kvfree(bin.base); + memset(ccsdata, 0, sizeof(*ccsdata)); return rval; }