Mirrors_Framework/nuttx
1
0
Fork 0
mirror of https://github.com/apache/nuttx.git synced 2026-05-29 20:56:47 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

nuttx/drivers: add ept_release_cb for destroy server resource

Browse Source 
use ept_release_cb to destory rpmsg services server dile resource
to avoid the used-after-free issue

Signed-off-by: yintao <yintao@xiaomi.com>
This commit is contained in:
yintao
2024-07-10 21:22:38 +08:00
committed by Xiang Xiao
parent 80d03cb296
commit 37a30023f5
13 changed files with 266 additions and 270 deletions
Download Patch File Download Diff File Expand all files Collapse all files
drivers/ioexpander/ioe_rpmsg.c
+7 -8
View File
@@ -602,13 +602,6 @@ static int ioe_rpmsg_server_ept_cb(FAR struct rpmsg_endpoint *ept,
return 0;
}
static void ioe_rpmsg_server_unbind(FAR struct rpmsg_endpoint *ept)
{
rpmsg_destroy_ept(ept);
kmm_free(ept);
}
static bool ioe_rpmsg_server_match(FAR struct rpmsg_device *rdev,
FAR void *priv_,
FAR const char *name,
@@ -622,6 +615,11 @@ static bool ioe_rpmsg_server_match(FAR struct rpmsg_device *rdev,
return !strcmp(name, eptname);
}
static void ioe_rpmsg_server_ept_release(FAR struct rpmsg_endpoint *ept)
{
kmm_free(ept);
}
static void ioe_rpmsg_server_bind(FAR struct rpmsg_device *rdev,
FAR void *priv_,
FAR const char *name,
@@ -637,9 +635,10 @@ static void ioe_rpmsg_server_bind(FAR struct rpmsg_device *rdev,
}
ept->priv = priv;
ept->release_cb = ioe_rpmsg_server_ept_release;
rpmsg_create_ept(ept, rdev, name, RPMSG_ADDR_ANY, RPMSG_ADDR_ANY,
ioe_rpmsg_server_ept_cb, ioe_rpmsg_server_unbind);
ioe_rpmsg_server_ept_cb, rpmsg_destroy_ept);
}
/****************************************************************************