[PATCH] clocksource/drivers/timer-fsl-ftm: Fix clk reference leak in error paths

From: Wentao Liang

Date: Tue Sep 15 2026 - 01:06:42 EST


__ftm_clk_init() obtains clock references with of_clk_get_by_name() but
never releases them on the error paths. If clk_prepare_enable() fails on
the counter clock, the reference is leaked. The second of_clk_get_by_name()
also overwrites the first clk pointer, so a failure to get or prepare the
ftm clock loses the counter clock reference as well; on the get failure
path the counter clock is left enabled and unreferenced.

Release the references on the error paths: clk_put() when prepare+enable
fails, and clk_disable_unprepare() followed by clk_put() when aborting
after the counter clock has been enabled. The clocks intentionally stay
enabled on the success path, so those are left untouched.

Fixes: 2529c3a33079 ("clocksource: Add Freescale FlexTimer Module (FTM) timer support")
Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Wentao Liang <vulab@xxxxxxxxxxx>
---
drivers/clocksource/timer-fsl-ftm.c | 25 +++++++++++++++++--------
1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/drivers/clocksource/timer-fsl-ftm.c b/drivers/clocksource/timer-fsl-ftm.c
index 4eed6cb46132..8ada0c3e088a 100644
--- a/drivers/clocksource/timer-fsl-ftm.c
+++ b/drivers/clocksource/timer-fsl-ftm.c
@@ -230,7 +230,8 @@ static int __init ftm_clocksource_init(unsigned long freq)
static int __init __ftm_clk_init(struct device_node *np, char *cnt_name,
char *ftm_name)
{
- struct clk *clk;
+ struct clk *clk, *ftm_clk;
+ unsigned long rate;
int err;

clk = of_clk_get_by_name(np, cnt_name);
@@ -242,20 +243,28 @@ static int __init __ftm_clk_init(struct device_node *np, char *cnt_name,
if (err) {
pr_err("ftm: clock failed to prepare+enable \"%s\": %d\n",
cnt_name, err);
+ clk_put(clk);
return err;
}

- clk = of_clk_get_by_name(np, ftm_name);
- if (IS_ERR(clk)) {
- pr_err("ftm: Cannot get \"%s\": %ld\n", ftm_name, PTR_ERR(clk));
- return PTR_ERR(clk);
+ ftm_clk = of_clk_get_by_name(np, ftm_name);
+ if (IS_ERR(ftm_clk)) {
+ pr_err("ftm: Cannot get \"%s\": %ld\n", ftm_name,
+ PTR_ERR(ftm_clk));
+ clk_disable_unprepare(clk);
+ clk_put(clk);
+ return PTR_ERR(ftm_clk);
}
- err = clk_prepare_enable(clk);
- if (err)
+ err = clk_prepare_enable(ftm_clk);
+ if (err) {
pr_err("ftm: clock failed to prepare+enable \"%s\": %d\n",
ftm_name, err);
+ rate = clk_get_rate(ftm_clk);
+ clk_put(ftm_clk);
+ return rate;
+ }

- return clk_get_rate(clk);
+ return clk_get_rate(ftm_clk);
}

static unsigned long __init ftm_clk_init(struct device_node *np)
--
2.34.1