[Bug 99952] Use after free in intel_audo_lpe_teardown

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=99952

--- Comment #3 from Chris Wilson <chris at chris-wilson.co.uk> ---
diff --git a/drivers/gpu/drm/i915/intel_lpe_audio.c
b/drivers/gpu/drm/i915/intel_lpe_audio.c
index 7a5b41b1c024..8d800aa60163 100644
--- a/drivers/gpu/drm/i915/intel_lpe_audio.c
+++ b/drivers/gpu/drm/i915/intel_lpe_audio.c
@@ -131,8 +131,8 @@ lpe_audio_platdev_create(struct drm_i915_private *dev_priv)

 static void lpe_audio_platdev_destroy(struct drm_i915_private *dev_priv)
 {
-       platform_device_unregister(dev_priv->lpe_audio.platdev);
        kfree(dev_priv->lpe_audio.platdev->dev.dma_mask);
+       platform_device_unregister(dev_priv->lpe_audio.platdev);
 }

 static void lpe_audio_irq_unmask(struct irq_data *d)

as platdev is freed by the unregister as kasan says.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20170227/7e525301/attachment.html>