regulator: core: Fix regualtor_ena_gpio_free not to access pin after freeing

After freeing pin from regulator_ena_gpio_free, loop can access
the pin. So this patch fixes not to access pin after freeing.

Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Signed-off-by: Mark Brown <broonie@kernel.org>
[sw0312.kim: cherry-pick from mainline to fix CVE-2014-9940]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Change-Id: Id4cbf09593e15909f33337ac09081bcbf0ce71ea

diff --git a/drivers/regulator/core.c b/drivers/regulator/core.c
index cfc3b75..7e27b58 100755 (executable)
--- a/drivers/regulator/core.c
+++ b/drivers/regulator/core.c
@@ -1535,6 +1535,8 @@ static void regulator_ena_gpio_free(struct regulator_dev *rdev)
                                gpio_free(pin->gpio);
                                list_del(&pin->list);
                                kfree(pin);
+                               rdev->ena_pin = NULL;
+                               return;
                        } else {
                                pin->request_count--;
                        }