diff options
author | Guennadi Liakhovetski <guennadi.liakhovetski@intel.com> | 2019-02-01 18:05:13 +0100 |
---|---|---|
committer | Mark Brown <broonie@kernel.org> | 2019-02-02 17:13:28 +0100 |
commit | 52abe6cc1866ac3d54612f5d80563e6608c0ddfc (patch) | |
tree | e003e0a1cc378513a2a3cfc505f373a40d42b069 /Documentation/acpi | |
parent | ASoC: rsnd: fixup MIX kctrl registration (diff) | |
download | linux-52abe6cc1866ac3d54612f5d80563e6608c0ddfc.tar.xz linux-52abe6cc1866ac3d54612f5d80563e6608c0ddfc.zip |
ASoC: topology: fix oops/use-after-free case with dai driver
rmmod/modprobe tests expose a kernel oops when accessing the dai
driver pointer. This comes from the topology design which operates in
multiple passes. Each object removal happens at a specific iteration,
and the code checks for the iteration (order) number after the memory
containing the order was freed.
Fix this be clearing a reference to the dai driver and check its
validity to avoid dereferences.
Signed-off-by: Guennadi Liakhovetski <guennadi.liakhovetski@intel.com>
Signed-off-by: Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
Signed-off-by: Mark Brown <broonie@kernel.org>
Diffstat (limited to 'Documentation/acpi')
0 files changed, 0 insertions, 0 deletions