[Intel-gfx] [PATCH] drm/dp/mst: Remove port after removing connector.

Dave Airlie airlied at gmail.com
Fri Aug 14 21:56:57 PDT 2015


On 11 August 2015 at 17:54, Maarten Lankhorst
<maarten.lankhorst at linux.intel.com> wrote:
> The port is removed synchronously, but the connector delayed.
> This causes a use after free which can cause a kernel BUG with
> slug_debug=FPZU. This is fixed by freeing the port after the
> connector.

Where is the use after free btw? I'm not sure I like delaying the port
destruction, there should be no need to.

The connector->port pointer shouldn't be used without validation
anywhere, and if it is that is a bug.

I'd like to reproduce this before pulling this in.

Dave.


More information about the dri-devel mailing list