[PATCH v4] drm/stm: Avoid use-after-free issues with crtc and plane
Raphael Gallais-Pou
raphael.gallais-pou at foss.st.com
Mon Jul 15 09:12:54 UTC 2024
On 2/16/24 13:50, Katya Orlova wrote:
> ltdc_load() calls functions drm_crtc_init_with_planes(),
> drm_universal_plane_init() and drm_encoder_init(). These functions
> should not be called with parameters allocated with devm_kzalloc()
> to avoid use-after-free issues [1].
>
> Use allocations managed by the DRM framework.
>
> Found by Linux Verification Center (linuxtesting.org).
>
> [1]
> https://lore.kernel.org/lkml/u366i76e3qhh3ra5oxrtngjtm2u5lterkekcz6y2jkndhuxzli@diujon4h7qwb/
>
> Signed-off-by: Katya Orlova <e.orlova at ispras.ru>
Hi Katya,
After some delay: applied on drm-misc-next.
Thanks,
Raphaël
More information about the dri-devel
mailing list