firmware: arm_scmi: Avoid double free in error flow
authorWen Yang <wenyang@linux.alibaba.com>
Mon, 25 Nov 2019 15:54:09 +0000 (23:54 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 9 Jan 2020 09:20:03 +0000 (10:20 +0100)
commit7da501c21a4aab22956c9323e04453a7ebe329d2
treeb6736a76e4f75d942f1e6ced0efcfd81d3cac375
parent3d29dc60aac16831b1822c831a7f40b45a9686d9
firmware: arm_scmi: Avoid double free in error flow

commit 8305e90a894f82c278c17e51a28459deee78b263 upstream.

If device_register() fails, both put_device() and kfree() are called,
ending with a double free of the scmi_dev.

Calling kfree() is needed only when a failure happens between the
allocation of the scmi_dev and its registration, so move it to there
and remove it from the error flow.

Fixes: 46edb8d1322c ("firmware: arm_scmi: provide the mandatory device release callback")
Signed-off-by: Wen Yang <wenyang@linux.alibaba.com>
Signed-off-by: Sudeep Holla <sudeep.holla@arm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/firmware/arm_scmi/bus.c