diff options
| author | Quentin Schulz <quentin.schulz@cherry.de> | 2025-12-15 17:36:15 +0100 |
|---|---|---|
| committer | Tomeu Vizoso <tomeu@tomeuvizoso.net> | 2026-01-10 17:49:14 +0100 |
| commit | 34f4495a7f72895776b81969639f527c99eb12b9 (patch) | |
| tree | e2b773542626ad7cc2af8f74069b9894b93896e0 /include/uapi/linux/bits.h | |
| parent | f509a081f6a289f7c66856333b3becce7a33c97e (diff) | |
accel/rocket: fix unwinding in error path in rocket_probe
When rocket_core_init() fails (as could be the case with EPROBE_DEFER),
we need to properly unwind by decrementing the counter we just
incremented and if this is the first core we failed to probe, remove the
rocket DRM device with rocket_device_fini() as well. This matches the
logic in rocket_remove(). Failing to properly unwind results in
out-of-bounds accesses.
Fixes: 0810d5ad88a1 ("accel/rocket: Add job submission IOCTL")
Cc: stable@vger.kernel.org
Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Reviewed-by: Tomeu Vizoso <tomeu@tomeuvizoso.net>
Signed-off-by: Tomeu Vizoso <tomeu@tomeuvizoso.net>
Link: https://patch.msgid.link/20251215-rocket-error-path-v1-2-eec3bf29dc3b@cherry.de
Diffstat (limited to 'include/uapi/linux/bits.h')
0 files changed, 0 insertions, 0 deletions
