Commit ba4a768a authored by Marek Vasut's avatar Marek Vasut Committed by liwei
Browse files

drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ 

mainline inclusion
from mainline-v6.11-rc1
commit 162e48cb1d84c2c966b649b8ac5c9d4f75f6d44f
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAUAT8
CVE: CVE-2024-46810

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=162e48cb1d84c2c966b649b8ac5c9d4f75f6d44f



--------------------------------

Make sure the connector is fully initialized before signalling any
HPD events via drm_kms_helper_hotplug_event(), otherwise this may
lead to NULL pointer dereference.

Signed-off-by: default avatarMarek Vasut <marex@denx.de>
Reviewed-by: default avatarRobert Foss <rfoss@kernel.org>
Signed-off-by: default avatarRobert Foss <rfoss@kernel.org>
Link: https://patchwork.freedesktop.org/patch/msgid/20240531203333.277476-1-marex@denx.de


Signed-off-by: default avatarliwei <liwei728@huawei.com>
parent 5d76abff

drivers/gpu/drm/bridge/tc358767.c

+1 −1
Original line number Diff line number Diff line
@@ -2034,7 +2034,7 @@ static irqreturn_t tc_irq_handler(int irq, void *arg) 
		dev_err(tc->dev, "syserr %x\n", stat);

	}



	if (tc->hpd_pin >= 0 && tc->bridge.dev) {

	if (tc->hpd_pin >= 0 && tc->bridge.dev && tc->aux.drm_dev) {

		/*

		 * H is triggered when the GPIO goes high.

		 *