linux-stable/drivers/video
Daniel Vetter 5678aac4a7 fbdev: Prevent possible use-after-free in fb_release()
[ Upstream commit 89bfd4017e ]

Most fbdev drivers have issues with the fb_info lifetime, because call to
framebuffer_release() from their driver's .remove callback, rather than
doing from fbops.fb_destroy callback.

Doing that will destroy the fb_info too early, while references to it may
still exist, leading to a use-after-free error.

To prevent this, check the fb_info reference counter when attempting to
kfree the data structure in framebuffer_release(). That will leak it but
at least will prevent the mentioned error.

Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Thomas Zimmermann <tzimmermann@suse.de>
Link: https://patchwork.freedesktop.org/patch/msgid/20220505220413.365977-1-javierm@redhat.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-05-25 09:59:13 +02:00
..
backlight backlight: qcom-wled: Respect enabled-strings in set_brightness 2021-12-22 11:18:46 +00:00
console fbcon: Add option to enable legacy hardware acceleration 2022-02-02 15:16:26 +01:00
fbdev fbdev: Prevent possible use-after-free in fb_release() 2022-05-25 09:59:13 +02:00
logo
display_timing.c
hdmi.c video: fix some kernel-doc markups 2020-11-16 18:23:16 +01:00
Kconfig
Makefile
of_display_timing.c video: Fix kernel-doc warnings in of_display_timing + of_videomode 2020-11-29 22:42:17 +01:00
of_videomode.c video: Fix kernel-doc warnings in of_display_timing + of_videomode 2020-11-29 22:42:17 +01:00
vgastate.c
videomode.c