summaryrefslogtreecommitdiffstats
path: root/drivers/gpu/drm/amd/display/dc/dcn321
diff options
context:
space:
mode:
authorLongJun Tang <tanglongjun@kylinos.cn>2022-11-04 17:29:31 +0800
committerAlex Deucher <alexander.deucher@amd.com>2022-11-09 17:41:42 -0500
commitfcb4f9193ee550aad05c8d0f8f6637143e567c80 (patch)
treefbf0888902d917a5f92a02ef607cda65f6cffd94 /drivers/gpu/drm/amd/display/dc/dcn321
parente50db38342d5d2243e9738a51c9737cbb017e456 (diff)
downloadlinux-stable-fcb4f9193ee550aad05c8d0f8f6637143e567c80.tar.gz
linux-stable-fcb4f9193ee550aad05c8d0f8f6637143e567c80.tar.bz2
linux-stable-fcb4f9193ee550aad05c8d0f8f6637143e567c80.zip
drm/amd/display: Have risk for memory exhaustion
In dcn*_clock_source_create when dcn*_clk_src_construct fails allocated clk_src needs release. A local attack could use this to cause memory exhaustion. Signed-off-by: LongJun Tang <tanglongjun@kylinos.cn> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'drivers/gpu/drm/amd/display/dc/dcn321')
-rw-r--r--drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c b/drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c
index e5861225f1df..d7d2c42bdb0f 100644
--- a/drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c
+++ b/drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c
@@ -829,6 +829,7 @@ static struct clock_source *dcn321_clock_source_create(
return &clk_src->base;
}
+ kfree(clk_src);
BREAK_TO_DEBUGGER();
return NULL;
}