mirror of
https://github.com/torvalds/linux.git
synced 2026-04-18 06:44:00 -04:00
a2be37eedb
All the functions operating on the 'handle' pointer are claiming it is a
pointer to const thus they should not modify the handle. In fact that's
a false statement, because first thing these functions do is drop the
cast to const with container_of:
struct acpm_info *acpm = handle_to_acpm_info(handle);
And with such cast the handle is easily writable with simple:
acpm->handle.ops.pmic_ops.read_reg = NULL;
The code is not correct logically, either, because functions like
acpm_get_by_node() and acpm_handle_put() are meant to modify the handle
reference counting, thus they must modify the handle. Modification here
happens anyway, even if the reference counting is stored in the
container which the handle is part of.
The code does not have actual visible bug, but incorrect 'const'
annotations could lead to incorrect compiler decisions.
Fixes: a88927b534 ("firmware: add Exynos ACPM protocol driver")
Cc: stable@vger.kernel.org
Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com>
Link: https://patch.msgid.link/20260224104203.42950-2-krzysztof.kozlowski@oss.qualcomm.com
Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
24 lines
501 B
C
24 lines
501 B
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* Copyright 2020 Samsung Electronics Co., Ltd.
|
|
* Copyright 2020 Google LLC.
|
|
* Copyright 2024 Linaro Ltd.
|
|
*/
|
|
#ifndef __EXYNOS_ACPM_H__
|
|
#define __EXYNOS_ACPM_H__
|
|
|
|
struct acpm_xfer {
|
|
const u32 *txd __counted_by_ptr(txcnt);
|
|
u32 *rxd __counted_by_ptr(rxcnt);
|
|
size_t txcnt;
|
|
size_t rxcnt;
|
|
unsigned int acpm_chan_id;
|
|
};
|
|
|
|
struct acpm_handle;
|
|
|
|
int acpm_do_xfer(struct acpm_handle *handle,
|
|
const struct acpm_xfer *xfer);
|
|
|
|
#endif /* __EXYNOS_ACPM_H__ */
|