2019-03-29 14:12:17 +08:00
|
|
|
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
2019-01-29 07:43:42 +08:00
|
|
|
From: Meng Wei <wei.meng@intel.com>
|
|
|
|
Date: Mon, 3 Dec 2018 16:53:09 +0800
|
2019-03-29 14:12:17 +08:00
|
|
|
Subject: [PATCH] media: intel-ipu4: fix 2 kernel panic in ipu driver
|
2019-01-29 07:43:42 +08:00
|
|
|
|
|
|
|
fix 2 kernel panic in ipu driver:
|
|
|
|
1, double free
|
|
|
|
2, memcpy after allocation failed.
|
|
|
|
|
|
|
|
Change-Id: Ic50b3428410ff47377009f472fa425acb860211f
|
|
|
|
Tracked-On: PKT-1691
|
|
|
|
Signed-off-by: Zhang Ning <ning.a.zhang@intel.com>
|
|
|
|
Signed-off-by: Meng Wei <wei.meng@intel.com>
|
|
|
|
---
|
|
|
|
drivers/media/pci/intel/ipu.c | 4 ++++
|
|
|
|
1 file changed, 4 insertions(+)
|
|
|
|
|
|
|
|
diff --git a/drivers/media/pci/intel/ipu.c b/drivers/media/pci/intel/ipu.c
|
2020-10-27 02:14:06 +08:00
|
|
|
index b235de1be6ec..39dfb7b519de 100644
|
2019-01-29 07:43:42 +08:00
|
|
|
--- a/drivers/media/pci/intel/ipu.c
|
|
|
|
+++ b/drivers/media/pci/intel/ipu.c
|
|
|
|
@@ -334,6 +334,10 @@ int request_cpd_fw(const struct firmware **firmware_p, const char *name,
|
|
|
|
return -ENOMEM;
|
|
|
|
tmp->size = fw->size;
|
|
|
|
tmp->data = vmalloc(fw->size);
|
|
|
|
+ if (!tmp->data) {
|
|
|
|
+ kfree(tmp);
|
|
|
|
+ return -ENOMEM;
|
|
|
|
+ }
|
|
|
|
memcpy((void *)tmp->data, fw->data, fw->size);
|
|
|
|
*firmware_p = tmp;
|
|
|
|
release_firmware(fw);
|
|
|
|
--
|
2019-04-08 18:08:36 +08:00
|
|
|
https://clearlinux.org
|
2019-01-29 07:43:42 +08:00
|
|
|
|