[PATCH v4] drm/stm: Avoid use-after-free issues with crtc and plane

Raphael Gallais-Pou raphael.gallais-pou at foss.st.com
Mon Jul 15 09:12:54 UTC 2024


On 2/16/24 13:50, Katya Orlova wrote:
> ltdc_load() calls functions drm_crtc_init_with_planes(),
> drm_universal_plane_init() and drm_encoder_init(). These functions
> should not be called with parameters allocated with devm_kzalloc()
> to avoid use-after-free issues [1].
>
> Use allocations managed by the DRM framework.
>
> Found by Linux Verification Center (linuxtesting.org).
>
> [1]
> https://lore.kernel.org/lkml/u366i76e3qhh3ra5oxrtngjtm2u5lterkekcz6y2jkndhuxzli@diujon4h7qwb/
>
> Signed-off-by: Katya Orlova <e.orlova at ispras.ru>


Hi Katya,

After some delay: applied on drm-misc-next.

Thanks,
Raphaël



More information about the dri-devel mailing list