On Mon, Dec 13, 2021 at 07:31:22PM +0100, Roberto Sassu wrote:
If virtio_gpu_object_shmem_init() fails (e.g. due to fault injection, as it happened in the bug report by syzbot), virtio_gpu_array_put_free() could be called with objs equal to NULL.
Ensure that objs is not NULL in virtio_gpu_array_put_free(), or otherwise return from the function.
Cc: stable@vger.kernel.org # 5.13.x Signed-off-by: Roberto Sassu roberto.sassu@huawei.com Reported-by: syzbot+e9072e90624a31dfa85f@syzkaller.appspotmail.com Fixes: 377f8331d0565 ("drm/virtio: fix possible leak/unlock virtio_gpu_object_array")
Pushed to drm-misc-next.
thanks, Gerd