diff options
| author | Brandon Brnich <b-brnich@ti.com> | 2026-04-02 13:45:53 -0500 |
|---|---|---|
| committer | Hans Verkuil <hverkuil+cisco@kernel.org> | 2026-05-04 09:31:04 +0200 |
| commit | 7cdbd7bb21949a8fda10c7104a2b12ee363cbf5c (patch) | |
| tree | efc0ac2dc753bb637da861c03b1fe4ef7a5f3997 /tools/lib/python/kdoc | |
| parent | 4ae45bf4663ed93c61e9f716e81455122fb66ee2 (diff) | |
media: chips-media: wave5: Release m2m_ctx after Instance Removed from List
Possible use after free if IRQ thread manages to obtain spinlock between
m2m_ctx release and wave5_release function removing stream instance from
list of active instances. The IRQ thread looks for the m2m_ctx which is
freed so null pointer dereference occurs.
Signed-off-by: Brandon Brnich <b-brnich@ti.com>
Reviewed-by: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Tested-by: Jackson Lee <jackson.lee@chipsnmedia.com>
Signed-off-by: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
Diffstat (limited to 'tools/lib/python/kdoc')
0 files changed, 0 insertions, 0 deletions