summaryrefslogtreecommitdiffstats
path: root/kernel/seccomp.c
diff options
context:
space:
mode:
authorMaxime Ripard <maxime@cerno.tech>2022-07-11 19:38:55 +0200
committerMaxime Ripard <maxime@cerno.tech>2022-07-13 10:46:08 +0200
commit7f0ba8f98a4ec3bee6a5d612e676a75791c0f127 (patch)
treeaa653bc66821b620d968285f3b0123090b3198e3 /kernel/seccomp.c
parent7c9a4bab7aeb4be917d4202a99a780b40eaa78c7 (diff)
downloadlinux-7f0ba8f98a4ec3bee6a5d612e676a75791c0f127.tar.bz2
drm/vc4: dpi: Switch to drmm_kzalloc
Our internal structure that stores the DRM entities structure is allocated through a device-managed kzalloc. This means that this will eventually be freed whenever the device is removed. In our case, the most likely source of removal is that the main device is going to be unbound, and component_unbind_all() is being run. However, it occurs while the DRM device is still registered, which will create dangling pointers, eventually resulting in use-after-free. Switch to a DRM-managed allocation to keep our structure until the DRM driver doesn't need it anymore. Acked-by: Thomas Zimmermann <tzimmermann@suse.de> Reviewed-by: Dave Stevenson <dave.stevenson@raspberrypi.com> Signed-off-by: Maxime Ripard <maxime@cerno.tech> Link: https://lore.kernel.org/r/20220711173939.1132294-26-maxime@cerno.tech
Diffstat (limited to 'kernel/seccomp.c')
0 files changed, 0 insertions, 0 deletions