mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
* [PATCH v3] drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
@ 2024-06-27  7:42 Ma Ke
  2024-06-27  9:02 ` Markus Elfring
  0 siblings, 1 reply; 7+ messages in thread
From: Ma Ke @ 2024-06-27  7:42 UTC (permalink / raw)
  To: kherbst, lyude, dakr, airlied, daniel, bskeggs, airlied
  Cc: dri-devel, nouveau, linux-kernel, Ma Ke, stable

In nouveau_connector_get_modes(), the return value of drm_mode_duplicate()
is assigned to mode, which will lead to a possible NULL pointer
dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Cc: stable@vger.kernel.org
Fixes: 6ee738610f41 ("drm/nouveau: Add DRM driver for NVIDIA GPUs")
Signed-off-by: Ma Ke <make24@iscas.ac.cn>
---
Changes in v3:
- added CC stable as suggested, sorry for my negligence.
Changes in v2:
- modified the patch according to suggestions;
- added Fixes line.
---
 drivers/gpu/drm/nouveau/nouveau_connector.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/drivers/gpu/drm/nouveau/nouveau_connector.c b/drivers/gpu/drm/nouveau/nouveau_connector.c
index 856b3ef5edb8..0c71d761d378 100644
--- a/drivers/gpu/drm/nouveau/nouveau_connector.c
+++ b/drivers/gpu/drm/nouveau/nouveau_connector.c
@@ -1001,6 +1001,9 @@ nouveau_connector_get_modes(struct drm_connector *connector)
 		struct drm_display_mode *mode;
 
 		mode = drm_mode_duplicate(dev, nv_connector->native_mode);
+		if (!mode)
+			return 0;
+
 		drm_mode_probed_add(connector, mode);
 		ret = 1;
 	}
-- 
2.25.1


^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2024-06-28 19:09 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-06-27  7:42 [PATCH v3] drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Ma Ke
2024-06-27  9:02 ` Markus Elfring
2024-06-28 17:49   ` Lyude Paul
2024-06-28 18:42     ` [v3] " Markus Elfring
2024-06-28 18:50       ` Lyude Paul
2024-06-28 19:02         ` Markus Elfring
2024-06-28 19:09           ` Lyude Paul

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®