diff options
| author |   LongJun Tang <tanglongjun@kylinos.cn> | 2022-11-04 17:29:31 +0800 |
|---|---|---|
| committer |   Alex Deucher <alexander.deucher@amd.com> | 2022-11-09 17:41:42 -0500 |
| commit | fcb4f9193ee550aad05c8d0f8f6637143e567c80 (patch) | |
| tree | fbf0888902d917a5f92a02ef607cda65f6cffd94 /drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c | |
| parent | drm/amdgpu: Replace 1-element array with flexible-array member (diff) | |
| download | wireguard-linux-fcb4f9193ee550aad05c8d0f8f6637143e567c80.tar.xz wireguard-linux-fcb4f9193ee550aad05c8d0f8f6637143e567c80.zip | |
drm/amd/display: Have risk for memory exhaustion
In dcn*_clock_source_create when dcn*_clk_src_construct fails allocated
clk_src needs release. A local attack could use this to cause memory
exhaustion.
Signed-off-by: LongJun Tang <tanglongjun@kylinos.cn>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c')
| -rw-r--r-- | drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c b/drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c index 7e7f18bef098..932c5d5706ec 100644 --- a/drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c +++ b/drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c @@ -431,6 +431,7 @@ static struct clock_source *dcn303_clock_source_create(struct dc_context *ctx, s return &clk_src->base; } + kfree(clk_src); BREAK_TO_DEBUGGER(); return NULL; } |