[PATCH v2] media: saa7164: add missing ioremap error handling
From: Wang Jun
Date: Wed Mar 11 2026 - 07:46:11 EST
Add checks for ioremap return values in saa7164_dev_setup(). If
ioremap for BAR0 or BAR2 fails, release the already allocated PCI
memory regions, remove the device from the global list, decrement
the device count, and return -ENODEV.
This prevents potential null pointer dereferences and ensures proper
cleanup on memory mapping failures.
Signed-off-by: Wang Jun <1742789905@xxxxxx>
---
drivers/media/pci/saa7164/saa7164-core.c | 29 ++++++++++++++++++++++++
1 file changed, 29 insertions(+)
diff --git a/drivers/media/pci/saa7164/saa7164-core.c b/drivers/media/pci/saa7164/saa7164-core.c
index a8a004f28ca0..bd4179d568cb 100644
--- a/drivers/media/pci/saa7164/saa7164-core.c
+++ b/drivers/media/pci/saa7164/saa7164-core.c
@@ -998,9 +998,21 @@ static int saa7164_dev_setup(struct saa7164_dev *dev)
/* PCI/e allocations */
dev->lmmio = ioremap(pci_resource_start(dev->pci, 0),
pci_resource_len(dev->pci, 0));
+ if (!dev->lmmio) {
+ dev_err(&dev->pci->dev,
+ "failed to remap MMIO memory @ 0x%llx\n",
+ (u64)pci_resource_start(dev->pci, 0));
+ goto err_ioremap;
+ }
dev->lmmio2 = ioremap(pci_resource_start(dev->pci, 2),
pci_resource_len(dev->pci, 2));
+ if (!dev->lmmio2) {
+ dev_err(&dev->pci->dev,
+ "failed to remap MMIO memory @ 0x%llx\n",
+ (u64)pci_resource_start(dev->pci, 2));
+ goto err_ioremap2;
+ }
dev->bmmio = (u8 __iomem *)dev->lmmio;
dev->bmmio2 = (u8 __iomem *)dev->lmmio2;
@@ -1019,6 +1031,23 @@ static int saa7164_dev_setup(struct saa7164_dev *dev)
saa7164_pci_quirks(dev);
return 0;
+err_ioremap2:
+ iounmap(dev->lmmio);
+err_ioremap:
+ /* Release the PCI memory regions allocated in get_resources() */
+ release_mem_region(pci_resource_start(dev->pci, 0),
+ pci_resource_len(dev->pci, 0));
+
+ release_mem_region(pci_resource_start(dev->pci, 2),
+ pci_resource_len(dev->pci, 2));
+
+ /* Remove from device list and decrement count */
+ mutex_lock(&devlist);
+ list_del(&dev->devlist);
+ mutex_unlock(&devlist);
+ saa7164_devcount--;
+
+ return -ENODEV;
}
static void saa7164_dev_unregister(struct saa7164_dev *dev)
--
2.43.0