linux/drivers/gpu/drm/tidss
Tomi Valkeinen 9da67433f6 drm/tidss: fix crash related to accessing freed memory
tidss uses devm_kzalloc to allocate DRM plane, encoder and crtc objects.
This is not correct as the lifetime of those objects should be longer
than the underlying device's.

When unloading tidss module, the devm_kzalloc'ed objects have already
been freed when tidss_release() is called, and the driver will accesses
freed memory possibly causing a crash, a kernel WARN, or other undefined
behavior, and also KASAN will give a bug.

Signed-off-by: Tomi Valkeinen <tomi.valkeinen@ti.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20200415092006.26675-1-tomi.valkeinen@ti.com
Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
2020-04-20 10:07:35 +03:00
..
Kconfig
Makefile
tidss_crtc.c drm/tidss: fix crash related to accessing freed memory 2020-04-20 10:07:35 +03:00
tidss_crtc.h drm/tidss: dispc: Fix broken plane positioning code 2020-02-28 14:48:58 +02:00
tidss_dispc_regs.h
tidss_dispc.c drm/tidss: Drop pointless static qualifier in dispc_find_csc() 2020-02-28 14:48:58 +02:00
tidss_dispc.h drm/tidss: dispc: Fix broken plane positioning code 2020-02-28 14:48:58 +02:00
tidss_drv.c
tidss_drv.h
tidss_encoder.c drm/tidss: fix crash related to accessing freed memory 2020-04-20 10:07:35 +03:00
tidss_encoder.h
tidss_irq.c
tidss_irq.h
tidss_kms.c drm/tidss: dispc: Fix broken plane positioning code 2020-02-28 14:48:58 +02:00
tidss_kms.h
tidss_plane.c drm/tidss: fix crash related to accessing freed memory 2020-04-20 10:07:35 +03:00
tidss_plane.h
tidss_scale_coefs.c
tidss_scale_coefs.h