On Mon, Dec 13, 2021 at 07:31:22PM +0100, Roberto Sassu wrote: > If virtio_gpu_object_shmem_init() fails (e.g. due to fault injection, as it > happened in the bug report by syzbot), virtio_gpu_array_put_free() could be > called with objs equal to NULL. > > Ensure that objs is not NULL in virtio_gpu_array_put_free(), or otherwise > return from the function. > > Cc: [email protected] # 5.13.x > Signed-off-by: Roberto Sassu <[email protected]> > Reported-by: [email protected] > Fixes: 377f8331d0565 ("drm/virtio: fix possible leak/unlock > virtio_gpu_object_array")
Pushed to drm-misc-next. thanks, Gerd
