On Tue, 17 Dec 2024 18:14:34 +0900, Joe Hattori wrote:
> As of_find_node_by_name() release the reference of the given OF node,
> tegra_emc_find_node_by_ram_code() releases some OF nodes while still in
> use, resulting in possible UAFs. Given the DT structure, utilize the
> for_each_child_of_node macro and of_get_child_by_name() to avoid the bug.
>
> This bug was found by an experimental verification tool that I am
> developing.
>
> [...]
Applied, thanks!
[1/1] memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
https://git.kernel.org/krzk/linux-mem-ctrl/c/b9784e5cde1f9fb83661a70e580e381ae1264d12
Best regards,
--
Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
