Alper Ak 5da29ade54 media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() ...

[ Upstream commit 81f8e0e6a2 ]

rga_get_frame() can return ERR_PTR(-EINVAL) when buffer type is
unsupported or invalid. rga_buf_init() does not check the return value
and unconditionally dereferences the pointer when accessing f->size.

Add proper ERR_PTR checking and return the error to prevent
dereferencing an invalid pointer.

Fixes: 6040702ade ("media: rockchip: rga: allocate DMA descriptors per buffer")
Cc: stable@vger.kernel.org
Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Reviewed-by: Michael Tretter <m.tretter@pengutronix.de>
Signed-off-by: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-04 07:21:40 -05:00

..

rga

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

2026-03-04 07:21:40 -05:00

rkisp1

…

Kconfig

…

Makefile

…