diff options
| author | Mark Brown <broonie@kernel.org> | 2026-09-28 13:19:53 +0100 |
|---|---|---|
| committer | Mark Brown <broonie@kernel.org> | 2026-09-28 13:19:53 +0100 |
| commit | bb65a2665f5891bb74fb679b5601750eec4bea62 (patch) | |
| tree | 0f1e1bf7dd01e353bce8674ccb5d0401ae390ce8 /tools/perf/scripts/python/stackcollapse.py | |
| parent | 3e71ea6dca1d585692b645aaf3b8cc58f6e5eb35 (diff) | |
| parent | 095025078dc3a1b4f0fcdc8b8d9dcb4d192a2a14 (diff) | |
ASoC: amd: Fix borrowed ACPI codec device references
Yibo Tan <lhfff@tju.edu.cn> says:
Two AMD machine drivers treat a borrowed ACPI physical device pointer as an
owned reference. The ES8336 driver drops it on a GPIO lookup failure; the
ACP3x driver drops it on an allocation failure and also stores it beyond
probe. Both paths produced a KASAN use-after-free during device unregister
in focused tests calling the production callbacks. The corresponding fixed
tests reached the same failure paths without a kernel diagnostic.
The tests did not exercise a complete sound card or physical hardware.
The changed ACP3x object builds with W=1 with CONFIG_ACPI=y and
CONFIG_ACPI=n. The ES8336 object builds with W=1 with CONFIG_ACPI=y.
Link: https://patch.msgid.link/20260922185057.954150-1-lhfff@tju.edu.cn
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions