On Wed, 26 Aug 2026 12:48:01 +0000, Lucas Martins Alves wrote:
> When jffs2_free_cache() releases the memory allocated for pL (the JFFS2
> private list structure), part->jffs2_priv was not cleared. This left
> part->jffs2_priv as a dangling pointer to freed memory, which could lead
> to use-after-free or double-free issues if jffs2_free_cache() or other
> JFFS2 functions were subsequently called on the same partition.
>
> Set part->jffs2_priv to NULL after freeing pL to ensure clean state.
>
> [...]
Applied to u-boot/next, thanks!
[1/1] fs: jffs2: set part->jffs2_priv to NULL after freeing cache
commit: 52673196da5751457ee48415fbd7626a4bfdadfc
--
Tom
