rtc: nvmem: fix possible use after free
authorAlexandre Belloni <alexandre.belloni@bootlin.com>
Sun, 30 Dec 2018 23:49:36 +0000 (00:49 +0100)
committerAlexandre Belloni <alexandre.belloni@bootlin.com>
Sun, 30 Dec 2018 23:49:36 +0000 (00:49 +0100)
commitbba3d2daa8a9bc888902275401f15ef48fcdd378
tree82fc0c9b852be399200d374ed3eb0f91ce9811fe
parente01b5781958de08942af341ce26768d5e0fbcdf5
rtc: nvmem: fix possible use after free

In cas of probe failure, devres may free the memory allocated for
rtc->nvram before devm_rtc_release_device() is called. This leads to
rtc_nvram_unregister using it after being freed which may lead to a crash.

This has been shown to happen after commit 461e557b9727 ("rtc: nvmem: use
devm_nvmem_register()")

Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
drivers/rtc/nvmem.c