[Intel-gfx] [PATCH] drm/dp/mst: Remove port after removing connector.
Dave Airlie
airlied at gmail.com
Fri Aug 14 21:56:57 PDT 2015
On 11 August 2015 at 17:54, Maarten Lankhorst
<maarten.lankhorst at linux.intel.com> wrote:
> The port is removed synchronously, but the connector delayed.
> This causes a use after free which can cause a kernel BUG with
> slug_debug=FPZU. This is fixed by freeing the port after the
> connector.
Where is the use after free btw? I'm not sure I like delaying the port
destruction, there should be no need to.
The connector->port pointer shouldn't be used without validation
anywhere, and if it is that is a bug.
I'd like to reproduce this before pulling this in.
Dave.
More information about the dri-devel
mailing list