Re: [PATCH v4] drm/stm: Avoid use-after-free issues with crtc and plane

From: Raphael Gallais-Pou
Date: Mon Jul 15 2024 - 05:14:15 EST



On 2/16/24 13:50, Katya Orlova wrote:
> ltdc_load() calls functions drm_crtc_init_with_planes(),
> drm_universal_plane_init() and drm_encoder_init(). These functions
> should not be called with parameters allocated with devm_kzalloc()
> to avoid use-after-free issues [1].
>
> Use allocations managed by the DRM framework.
>
> Found by Linux Verification Center (linuxtesting.org).
>
> [1]
> https://lore.kernel.org/lkml/u366i76e3qhh3ra5oxrtngjtm2u5lterkekcz6y2jkndhuxzli@diujon4h7qwb/
>
> Signed-off-by: Katya Orlova <e.orlova@xxxxxxxxx>


Hi Katya,

After some delay: applied on drm-misc-next.

Thanks,
Raphaël