fwnode_handle_get(fwnode) is called when a domain is created with fwnode
passed as a function parameter. fwnode_handle_put(domain->fwnode) is
called when the domain is destroyed but during the creation a path
exists that does not set domain->fwnode.

If this path is taken, the fwnode get will never be put.

To avoid the unbalanced get and put, set domain->fwnode unconditionally.

Fixes: d59f6617eef0 ("genirq: Allow fwnode to carry name information only")
Cc: sta...@vger.kernel.org
Signed-off-by: Herve Codina <herve.cod...@bootlin.com>
---
 kernel/irq/irqdomain.c | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/kernel/irq/irqdomain.c b/kernel/irq/irqdomain.c
index 012ada09b419..31277488ed42 100644
--- a/kernel/irq/irqdomain.c
+++ b/kernel/irq/irqdomain.c
@@ -156,7 +156,6 @@ static struct irq_domain *__irq_domain_create(struct 
fwnode_handle *fwnode,
                switch (fwid->type) {
                case IRQCHIP_FWNODE_NAMED:
                case IRQCHIP_FWNODE_NAMED_ID:
-                       domain->fwnode = fwnode;
                        domain->name = kstrdup(fwid->name, GFP_KERNEL);
                        if (!domain->name) {
                                kfree(domain);
@@ -165,7 +164,6 @@ static struct irq_domain *__irq_domain_create(struct 
fwnode_handle *fwnode,
                        domain->flags |= IRQ_DOMAIN_NAME_ALLOCATED;
                        break;
                default:
-                       domain->fwnode = fwnode;
                        domain->name = fwid->name;
                        break;
                }
@@ -185,7 +183,6 @@ static struct irq_domain *__irq_domain_create(struct 
fwnode_handle *fwnode,
                }
 
                domain->name = strreplace(name, '/', ':');
-               domain->fwnode = fwnode;
                domain->flags |= IRQ_DOMAIN_NAME_ALLOCATED;
        }
 
@@ -201,8 +198,8 @@ static struct irq_domain *__irq_domain_create(struct 
fwnode_handle *fwnode,
                domain->flags |= IRQ_DOMAIN_NAME_ALLOCATED;
        }
 
-       fwnode_handle_get(fwnode);
-       fwnode_dev_initialized(fwnode, true);
+       domain->fwnode = fwnode_handle_get(fwnode);
+       fwnode_dev_initialized(domain->fwnode, true);
 
        /* Fill structure */
        INIT_RADIX_TREE(&domain->revmap_tree, GFP_KERNEL);
-- 
2.45.0


Reply via email to