]> www.infradead.org Git - users/hch/misc.git/commit
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
authorBiju Das <biju.das.jz@bp.renesas.com>
Tue, 19 Nov 2024 19:20:29 +0000 (19:20 +0000)
committerDmitry Baryshkov <dmitry.baryshkov@linaro.org>
Fri, 20 Dec 2024 01:53:25 +0000 (03:53 +0200)
commit81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8
tree8cf3326707d09427e603d2445f34f2f934924e0e
parent902806baf3c1e8383c1fe3ff0b6042b8cb5c2707
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

The host_node pointer was assigned and freed in adv7533_parse_dt(), and
later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue
by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()
in error path of probe() and also in the remove().

Fixes: 1e4d58cd7f88 ("drm/bridge: adv7533: Create a MIPI DSI device")
Cc: stable@vger.kernel.org
Reviewed-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
Signed-off-by: Biju Das <biju.das.jz@bp.renesas.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20241119192040.152657-2-biju.das.jz@bp.renesas.com
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drivers/gpu/drm/bridge/adv7511/adv7511_drv.c
drivers/gpu/drm/bridge/adv7511/adv7533.c