[PATCH] fsi: master-hub: Fix of_node leak in probe error path
Eddie James
eajames at linux.ibm.com
Tue Nov 4 05:12:23 AEDT 2025
On 10/30/25 4:55 AM, Haotian Zhang wrote:
> If the call to fsi_master_register() fails, the function exits
> without releasing the of_node reference previously acquired via
> of_node_get(). This results in an of_node reference count leak.
>
> Add a call to of_node_put() under a new label to ensure the
> reference is correctly released before the function returns.
Reviewed-by: Eddie James <eajames at linux.ibm.com>
>
> Fixes: f6a2f8eb73f0 ("fsi: Match fsi slaves and engines to available dt nodes")
> Signed-off-by: Haotian Zhang <vulab at iscas.ac.cn>
> ---
> drivers/fsi/fsi-master-hub.c | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/fsi/fsi-master-hub.c b/drivers/fsi/fsi-master-hub.c
> index 6568fed7db3c..e259ed1c17e0 100644
> --- a/drivers/fsi/fsi-master-hub.c
> +++ b/drivers/fsi/fsi-master-hub.c
> @@ -241,7 +241,7 @@ static int hub_master_probe(struct device *dev)
>
> rc = fsi_master_register(&hub->master);
> if (rc)
> - goto err_release;
> + goto err_free_node;
>
> /* At this point, fsi_master_register performs the device_initialize(),
> * and holds the sole reference on master.dev. This means the device
> @@ -253,6 +253,8 @@ static int hub_master_probe(struct device *dev)
> get_device(&hub->master.dev);
> return 0;
>
> +err_free_node:
> + of_node_put(hub->master.dev.of_node);
> err_release:
> fsi_slave_release_range(fsi_dev->slave, FSI_HUB_LINK_OFFSET,
> FSI_HUB_LINK_SIZE * links);
More information about the linux-fsi
mailing list