platform/chrome: cros_ec_typec: zero out stale pointers
`cros_typec_get_switch_handles` allocates four pointers when obtaining type-c switch handles. These pointers are all freed if failing to obtain any of them; therefore, pointers in `port` become stale. The stale pointers eventually cause use-after-free or double free in later code paths. Zeroing out all pointer fields after freeing to eliminate these stale pointers. Fixes: f28adb41 ("platform/chrome: cros_ec_typec: Register Type C switches") Fixes: 1a8912ca ("platform/chrome: cros_ec_typec: Get retimer handle") Signed-off-by:Victor Ding <victording@chromium.org> Acked-by:
Prashant Malani <pmalani@chromium.org> Signed-off-by:
Tzung-Bi Shih <tzungbi@kernel.org> Link: https://lore.kernel.org/r/20221207093924.v2.1.I1864b6a7ee98824118b93677868d22d3750f439b@changeid
Showing
Please register or sign in to comment