drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

[ Upstream commit a10f910c77f280327b481e77eab909934ec508f0 ]

If the interrupt occurs before resource initialization is complete, the
interrupt handler/worker may access uninitialized data such as the I2C
tcpc_client device, potentially leading to NULL pointer dereference.

Signed-off-by: Loic Poulain <loic.poulain@oss.qualcomm.com>
Fixes: 8bdfc5dae4e3 ("drm/bridge: anx7625: Add anx7625 MIPI DSI/DPI to DP")
Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Link: https://lore.kernel.org/r/20250709085438.56188-1-loic.poulain@oss.qualcomm.com
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

diff --git a/drivers/gpu/drm/bridge/analogix/anx7625.c b/drivers/gpu/drm/bridge/analogix/anx7625.c
index c036bbc92ba96ec4663c55cca091cd5da9f6d271..7244c3abb7f9928f9663c14fdd475b3eb01c692a 100644 (file)
--- a/drivers/gpu/drm/bridge/analogix/anx7625.c
+++ b/drivers/gpu/drm/bridge/analogix/anx7625.c
@@ -2683,7 +2683,7 @@ static int anx7625_i2c_probe(struct i2c_client *client)
                ret = devm_request_threaded_irq(dev, platform->pdata.intp_irq,
                                                NULL, anx7625_intr_hpd_isr,
                                                IRQF_TRIGGER_FALLING |
-                                               IRQF_ONESHOT,
+                                               IRQF_ONESHOT | IRQF_NO_AUTOEN,
                                                "anx7625-intp", platform);
                if (ret) {
                        DRM_DEV_ERROR(dev, "fail to request irq\n");
@@ -2753,8 +2753,10 @@ static int anx7625_i2c_probe(struct i2c_client *client)
        }
 
        /* Add work function */
-       if (platform->pdata.intp_irq)
+       if (platform->pdata.intp_irq) {
+               enable_irq(platform->pdata.intp_irq);
                queue_work(platform->workqueue, &platform->work);
+       }
 
        if (platform->pdata.audio_en)
                anx7625_register_audio(dev, platform);