ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
authorJohan Hovold <johan+linaro@kernel.org>
Tue, 3 Oct 2023 15:55:57 +0000 (17:55 +0200)
committerMark Brown <broonie@kernel.org>
Mon, 9 Oct 2023 12:03:36 +0000 (13:03 +0100)
Make sure to deregister the component when the driver is being unbound
and before the underlying device-managed resources are freed.

Fixes: 16572522aece ("ASoC: codecs: wcd938x-sdw: add SoundWire driver")
Cc: stable@vger.kernel.org # 5.14
Cc: Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
Signed-off-by: Johan Hovold <johan+linaro@kernel.org>
Link: https://lore.kernel.org/r/20231003155558.27079-7-johan+linaro@kernel.org
Signed-off-by: Mark Brown <broonie@kernel.org>
sound/soc/codecs/wcd938x-sdw.c

index 6951120057e55d97f9f6513363f354aa4ef03c7d..1baea04480e27d8efc4ce44186015f7bf7efc455 100644 (file)
@@ -1281,6 +1281,15 @@ static int wcd9380_probe(struct sdw_slave *pdev,
        return component_add(dev, &wcd938x_sdw_component_ops);
 }
 
+static int wcd9380_remove(struct sdw_slave *pdev)
+{
+       struct device *dev = &pdev->dev;
+
+       component_del(dev, &wcd938x_sdw_component_ops);
+
+       return 0;
+}
+
 static const struct sdw_device_id wcd9380_slave_id[] = {
        SDW_SLAVE_ENTRY(0x0217, 0x10d, 0),
        {},
@@ -1320,6 +1329,7 @@ static const struct dev_pm_ops wcd938x_sdw_pm_ops = {
 
 static struct sdw_driver wcd9380_codec_driver = {
        .probe  = wcd9380_probe,
+       .remove = wcd9380_remove,
        .ops = &wcd9380_slave_ops,
        .id_table = wcd9380_slave_id,
        .driver = {