Searched hist:"52 abe6cc1866ac3d54612f5d80563e6608c0ddfc" (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/sound/soc/ |
| H A D | soc-topology.c | diff 52abe6cc1866ac3d54612f5d80563e6608c0ddfc Fri Feb 01 11:05:13 CST 2019 Guennadi Liakhovetski <guennadi.liakhovetski@intel.com> ASoC: topology: fix oops/use-after-free case with dai driver
rmmod/modprobe tests expose a kernel oops when accessing the dai
driver pointer. This comes from the topology design which operates in
multiple passes. Each object removal happens at a specific iteration,
and the code checks for the iteration (order) number after the memory
containing the order was freed.
Fix this be clearing a reference to the dai driver and check its
validity to avoid dereferences.
Signed-off-by: Guennadi Liakhovetski <guennadi.liakhovetski@intel.com>
Signed-off-by: Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
Signed-off-by: Mark Brown <broonie@kernel.org>
|
| H A D | soc-core.c | diff 52abe6cc1866ac3d54612f5d80563e6608c0ddfc Fri Feb 01 11:05:13 CST 2019 Guennadi Liakhovetski <guennadi.liakhovetski@intel.com> ASoC: topology: fix oops/use-after-free case with dai driver
rmmod/modprobe tests expose a kernel oops when accessing the dai
driver pointer. This comes from the topology design which operates in
multiple passes. Each object removal happens at a specific iteration,
and the code checks for the iteration (order) number after the memory
containing the order was freed.
Fix this be clearing a reference to the dai driver and check its
validity to avoid dereferences.
Signed-off-by: Guennadi Liakhovetski <guennadi.liakhovetski@intel.com>
Signed-off-by: Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
Signed-off-by: Mark Brown <broonie@kernel.org>
|