José ExpósitoandGreg Kroah-Hartman 561fc0c5cf drm/vkms: Fix use after free and double free on init error ...

[ Upstream commit ed15511a77 ]

If the driver initialization fails, the vkms_exit() function might
access an uninitialized or freed default_config pointer and it might
double free it.

Fix both possible errors by initializing default_config only when the
driver initialization succeeded.

Reported-by: Louis Chauvet <louis.chauvet@bootlin.com>
Closes: https://lore.kernel.org/all/Z5uDHcCmAwiTsGte@louis-chauvet-laptop/
Fixes: 2df7af93fd ("drm/vkms: Add vkms_config type")
Signed-off-by: José Expósito <jose.exposito89@gmail.com>
Reviewed-by: Thomas Zimmermann <tzimmremann@suse.de>
Reviewed-by: Louis Chauvet <louis.chauvet@bootlin.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20250212084912.3196-1-jose.exposito89@gmail.com
Signed-off-by: Louis Chauvet <louis.chauvet@bootlin.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-04-10 14:37:27 +02:00

..

Makefile

…

vkms_composer.c

drm/vkms: Round fixp2int conversion in lerp_u16

2025-03-22 12:50:44 -07:00

vkms_crtc.c

…

vkms_drv.c

drm/vkms: Fix use after free and double free on init error

2025-04-10 14:37:27 +02:00

vkms_drv.h

…

vkms_formats.c

…

vkms_formats.h

…

vkms_output.c

…

vkms_plane.c

…

vkms_writeback.c

…