diff options
| author | Radhey Shyam Pandey <radhey.shyam.pandey@amd.com> | 2026-09-06 18:49:41 +0530 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-09-10 17:09:11 +0200 |
| commit | c4b27b3605788bbf9e4251f3cd4ab94645ab036f (patch) | |
| tree | 145979080912f0cb199727ab2f15d4f717355643 /tools/lib/python/kdoc/python_version.py | |
| parent | 8a0200d14acd9db388b85cd016e68a4e60d900ec (diff) | |
| download | linux-next-c4b27b3605788bbf9e4251f3cd4ab94645ab036f.tar.gz linux-next-c4b27b3605788bbf9e4251f3cd4ab94645ab036f.zip | |
usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()
tps6598x_connect() passes a stack-allocated typec_partner_desc to
typec_register_partner() after initializing only usb_pd, accessory and
identity.
typec_register_partner() copies attach and deattach from the descriptor
into the partner. With those fields left unset, garbage function pointers
may be stored and later invoked from typec_partner_link_device() when a USB
device is linked to the port. Uninitialized pd_revision and usb_capability
similarly leak stack data through partner sysfs.
Zero-initialize the descriptor so optional callbacks remain NULL and the
remaining fields are zero.
Fixes: 0a4c005bd171 ("usb: typec: driver for TI TPS6598x USB Power Delivery controllers")
Cc: stable <stable@kernel.org> # 5.15+
Reviewed-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Signed-off-by: Radhey Shyam Pandey <radhey.shyam.pandey@amd.com>
Link: https://patch.msgid.link/20260906131942.83153-2-radhey.shyam.pandey@amd.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/lib/python/kdoc/python_version.py')
0 files changed, 0 insertions, 0 deletions