[PATCH next] drm: writeback: Fix use after free in drm_writeback_connector_cleanup()
Dmitry Baryshkov
dmitry.baryshkov at linaro.org
Wed Feb 12 20:59:26 UTC 2025
On Wed, Feb 12, 2025 at 06:23:48PM +0300, Dan Carpenter wrote:
> The drm_writeback_cleanup_job() function frees "pos" so call
> list_del(&pos->list_entry) first to avoid a use after free.
>
> Fixes: 1914ba2b91ea ("drm: writeback: Create drmm variants for drm_writeback_connector initialization")
> Signed-off-by: Dan Carpenter <dan.carpenter at linaro.org>
> ---
> drivers/gpu/drm/drm_writeback.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov at linaro.org>
--
With best wishes
Dmitry
More information about the dri-devel
mailing list