Re: [PATCH] net: ti: icssg-prueth-sr1: Fix device_node refcount leak in prueth_probe()
From: Xiangwu Lai
Date: Mon Nov 09 2026 - 03:48:49 EST
Hi,
Please find below the additional information netdev-bot requested
for this series.
How the issue was discovered: manual code inspection of the error
paths in prueth_probe() while auditing the SR1.0 driver for
probe-time resource leaks.
Whether the issue was actually triggered: no, it is purely
theoretical. The affected branches only run when the "ti,mii-g-rt"
or "ti,mii-rt" syscon regmap lookup fails, which happens only with a
malformed or incomplete device tree. On a valid DT these branches
are never taken. When they are, probe() fails with -ENODEV and the
of_node_get() references taken on eth0_node/eth1_node earlier in
the function are leaked silently; there is no stack trace or error
message pointing at the leak itself.
Hardware the change was tested on: none, it was not tested on real
hardware. The change only re-routes two error branches to the
existing put_cores label, which is already exercised by the other
failure paths in the same function (e.g. prueth_get_cores()
failures), so no new cleanup code is introduced.
Regarding the Sashiko finding: the same leak in the non-SR1 variant
of the driver (icssg_prueth.c) is real, and it is fixed by a
companion patch submitted at the same time as this one:
https://lore.kernel.org/netdev/20261030085651.1944-1-laixiangwu@xxxxxxxxxxxxxxxxxxxx/
Best regards,
Xiangwu Lai