diff options
| author | Wentao Liang <vulab@iscas.ac.cn> | 2026-09-17 16:58:51 +0000 |
|---|---|---|
| committer | Mark Brown <broonie@kernel.org> | 2026-09-18 18:04:30 +0100 |
| commit | 5ea495bccfd746b063bc6702064f167467717b41 (patch) | |
| tree | 389eefd977ffda07986326e9cb725f5fa2fe3956 /tools/perf/scripts/python/stackcollapse.py | |
| parent | d0814ef719032e34ff1ca5fb1be44c15bcfd54a0 (diff) | |
ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c()
of_graph_get_next_port() consumes the reference of its prev argument.
port0 is only borrowed from the caller's iterator, so the call drops a
reference the function does not own, and port0 is dereferenced again
afterwards. Pass an extra reference, as graph_count_c2c() does, so the
reference the callee consumes is the one taken here.
Fixes: 5f281c3e82b1 ("ASoC: audio-graph-card2: use __free(device_node) for device node")
Cc: stable@vger.kernel.org
Signed-off-by: Wentao Liang <vulab@iscas.ac.cn>
Acked-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
Link: https://patch.msgid.link/20260917165851.2163548-1-vulab@iscas.ac.cn
Signed-off-by: Mark Brown <broonie@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions
