Skip to content
Snippets Groups Projects
Verified Commit ed15511a authored by José Expósito's avatar José Expósito Committed by Louis Chauvet
Browse files

drm/vkms: Fix use after free and double free on init error


If the driver initialization fails, the vkms_exit() function might
access an uninitialized or freed default_config pointer and it might
double free it.

Fix both possible errors by initializing default_config only when the
driver initialization succeeded.

Reported-by: default avatarLouis Chauvet <louis.chauvet@bootlin.com>
Closes: https://lore.kernel.org/all/Z5uDHcCmAwiTsGte@louis-chauvet-laptop/


Fixes: 2df7af93 ("drm/vkms: Add vkms_config type")
Signed-off-by: default avatarJosé Expósito <jose.exposito89@gmail.com>
Reviewed-by: default avatarThomas Zimmermann <tzimmremann@suse.de>
Reviewed-by: default avatarLouis Chauvet <louis.chauvet@bootlin.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20250212084912.3196-1-jose.exposito89@gmail.com


Signed-off-by: default avatarLouis Chauvet <louis.chauvet@bootlin.com>
parent ff3881cc
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment