Merge branch 'ionic-fix-port_info-lifetime-bugs'

Eric Joyner says:

====================
ionic: fix port_info lifetime bugs

Two fixes for the lifetime of the ionic port_info DMA buffer.

Patch 1 fixes a use-after-free. ionic_port_init() allocates port_info
only when the pointer is NULL, but its error path frees the buffer
unconditionally. On the firmware recovery paths,
ionic_lif_handle_fw_up() and ionic_reset_done(), the buffer belongs to
an earlier successful init, so a failed PORT_INIT frees it under any
ethtool op that is already reading it. The error path now frees only
what the same call allocated.

Patch 2 (v1 patch 3) fixes a leak of the same buffer when probe fails
after the port has been set up.

Issues were discovered by a Sashiko. I tested it on an actual DSC3
"Pollara" with a hacked driver and test kernel to cause both issues.
====================

Link: https://patch.msgid.link/20261015-ionic-port-info-lifetime-v2-0-57232013fd79@amd.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

0 files changed, 0 insertions, 0 deletions