drm/stm: Avoid use-after-free issues with crtc and plane
authorKatya Orlova <e.orlova@ispras.ru>
Fri, 16 Feb 2024 12:50:40 +0000 (15:50 +0300)
committerRaphael Gallais-Pou <raphael.gallais-pou@foss.st.com>
Mon, 15 Jul 2024 08:22:30 +0000 (10:22 +0200)
commit19dd9780b7ac673be95bf6fd6892a184c9db611f
treebbe5b66ca919068f60e26c7fc2bad454e43e4b24
parentfd39730c58890cd7f0a594231e19bb357f28877c
drm/stm: Avoid use-after-free issues with crtc and plane

ltdc_load() calls functions drm_crtc_init_with_planes(),
drm_universal_plane_init() and drm_encoder_init(). These functions
should not be called with parameters allocated with devm_kzalloc()
to avoid use-after-free issues [1].

Use allocations managed by the DRM framework.

Found by Linux Verification Center (linuxtesting.org).

[1]
https://lore.kernel.org/lkml/u366i76e3qhh3ra5oxrtngjtm2u5lterkekcz6y2jkndhuxzli@diujon4h7qwb/

Signed-off-by: Katya Orlova <e.orlova@ispras.ru>
Acked-by: Raphaƫl Gallais-Pou <raphael.gallais-pou@foss.st.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20240216125040.8968-1-e.orlova@ispras.ru
Signed-off-by: Raphael Gallais-Pou <raphael.gallais-pou@foss.st.com>
drivers/gpu/drm/stm/drv.c
drivers/gpu/drm/stm/ltdc.c