Skip to content

Commit

Permalink
net: phy: qcom: at803x: fix kernel panic with at8031_probe
Browse files Browse the repository at this point in the history
On reworking and splitting the at803x driver, in splitting function of
at803x PHYs it was added a NULL dereference bug where priv is referenced
before it's actually allocated and then is tried to write to for the
is_1000basex and is_fiber variables in the case of at8031, writing on
the wrong address.

Fix this by correctly setting priv local variable only after
at803x_probe is called and actually allocates priv in the phydev struct.

Reported-by: William Wortel <[email protected]>
Cc: <[email protected]>
Fixes: 25d2ba9 ("net: phy: at803x: move specific at8031 probe mode check to dedicated probe")
Signed-off-by: Christian Marangi <[email protected]>
Reviewed-by: Andrew Lunn <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Paolo Abeni <[email protected]>
  • Loading branch information
Ansuel authored and Paolo Abeni committed Mar 28, 2024
1 parent 005e528 commit 6a4aee2
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion drivers/net/phy/qcom/at803x.c
Original file line number Diff line number Diff line change
Expand Up @@ -797,7 +797,7 @@ static int at8031_parse_dt(struct phy_device *phydev)

static int at8031_probe(struct phy_device *phydev)
{
struct at803x_priv *priv = phydev->priv;
struct at803x_priv *priv;
int mode_cfg;
int ccr;
int ret;
Expand All @@ -806,6 +806,8 @@ static int at8031_probe(struct phy_device *phydev)
if (ret)
return ret;

priv = phydev->priv;

/* Only supported on AR8031/AR8033, the AR8030/AR8035 use strapping
* options.
*/
Expand Down

0 comments on commit 6a4aee2

Please sign in to comment.