]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
authorBiju Das <biju.das.jz@bp.renesas.com>
Tue, 19 Nov 2024 19:20:29 +0000 (19:20 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Jan 2025 12:34:48 +0000 (13:34 +0100)
commitd208571943ffddc438a7ce533d5d0b9219806242
treeb300b5ac6fb714648bf0ef7b1adce308156624a7
parent90d4d2718efe3bdadd9eec729278e8a5b3e4695d
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

[ Upstream commit 81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8 ]

The host_node pointer was assigned and freed in adv7533_parse_dt(), and
later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue
by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()
in error path of probe() and also in the remove().

Fixes: 1e4d58cd7f88 ("drm/bridge: adv7533: Create a MIPI DSI device")
Cc: stable@vger.kernel.org
Reviewed-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
Signed-off-by: Biju Das <biju.das.jz@bp.renesas.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20241119192040.152657-2-biju.das.jz@bp.renesas.com
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/gpu/drm/bridge/adv7511/adv7511_drv.c
drivers/gpu/drm/bridge/adv7511/adv7533.c