[PATCH] FIP: don't free the buffer twice when parsing fails

Sascha Hauer s.hauer at pengutronix.de
Mon Nov 9 01:07:35 PST 2026


On Sun, 08 Nov 2026 21:15:23 +0100, Ahmad Fatoum wrote:
> fip_do_parse_buf() hands the buffer to the fip_state before it checks
> anything, so fip_free() frees it. fip_parse() freed it on a parse error
> as well, and fiptool and the bootm handler call fip_free() afterwards,
> which trips over the double free:
> 
>   !block_is_free(block) && "block already marked as free"common/tlsf.c 1069
> 
> [...]

Applied, thanks!

[1/1] FIP: don't free the buffer twice when parsing fails
      https://git.pengutronix.de/cgit/barebox/commit/?id=db380db7a860 (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>




More information about the barebox mailing list