Skip to content

Commit 7215e45

Browse files
2045geminigregkh
authored andcommitted
soundwire: debugfs: initialize firmware_file to empty string
Passing NULL to debugfs_create_str() causes a NULL pointer dereference, and creating debugfs nodes with NULL string pointers is no longer permitted. Additionally, firmware_file is a global pointer. Previously, adding every new slave blindly overwrote it with NULL. Fix these issues by initializing firmware_file to an allocated empty string once in the subsystem init path (sdw_debugfs_init), and freeing it in the exit path. Existing driver code handles empty strings correctly. Fixes: fe46d2a ("soundwire: debugfs: add interface to read/write commands") Reported-by: yangshiguang <yangshiguang@xiaomi.com> Closes: https://lore.kernel.org/lkml/17647e4c.d461.19b46144a4e.Coremail.yangshiguang1011@163.com/ Signed-off-by: Gui-Dong Han <hanguidong02@gmail.com> Link: https://patch.msgid.link/20260323085930.88894-4-hanguidong02@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 4afc929 commit 7215e45

1 file changed

Lines changed: 7 additions & 2 deletions

File tree

drivers/soundwire/debugfs.c

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -358,8 +358,8 @@ void sdw_slave_debugfs_init(struct sdw_slave *slave)
358358
debugfs_create_file("go", 0200, d, slave, &cmd_go_fops);
359359

360360
debugfs_create_file("read_buffer", 0400, d, slave, &read_buffer_fops);
361-
firmware_file = NULL;
362-
debugfs_create_str("firmware_file", 0200, d, &firmware_file);
361+
if (firmware_file)
362+
debugfs_create_str("firmware_file", 0200, d, &firmware_file);
363363

364364
slave->debugfs = d;
365365
}
@@ -371,10 +371,15 @@ void sdw_slave_debugfs_exit(struct sdw_slave *slave)
371371

372372
void sdw_debugfs_init(void)
373373
{
374+
if (!firmware_file)
375+
firmware_file = kstrdup("", GFP_KERNEL);
376+
374377
sdw_debugfs_root = debugfs_create_dir("soundwire", NULL);
375378
}
376379

377380
void sdw_debugfs_exit(void)
378381
{
379382
debugfs_remove_recursive(sdw_debugfs_root);
383+
kfree(firmware_file);
384+
firmware_file = NULL;
380385
}

0 commit comments

Comments
 (0)