linux-kernel - Re: [PATCH] drivers: video: backlight: Fix NULL Pointer Dereference in backlight_device

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Z-v4WansLWJtv9CV@aspen.lan>
Date: Tue, 1 Apr 2025 15:29:45 +0100
From: Daniel Thompson <daniel@...cstar.com>
To: Haoyu Li <lihaoyu499@...il.com>
Cc: danielt@...nel.org, chenyuan0y@...il.com, deller@....de,
	dri-devel@...ts.freedesktop.org, jani.nikula@...ux.intel.com,
	jingoohan1@...il.com, lee@...nel.org, linux-fbdev@...r.kernel.org,
	linux-kernel@...r.kernel.org, robh@...nel.org,
	stable@...r.kernel.org, zichenxie0106@...il.com
Subject: Re: [PATCH] drivers: video: backlight: Fix NULL Pointer Dereference
 in backlight_device_register()

Hi Haoyu

On Wed, Feb 19, 2025 at 08:29:50PM +0800, Haoyu Li wrote:
> As per Jani and Daniel's feedback, I have updated the patch so that
> the `wled->name` null check now occurs in the `wled_configure`
> function, right after the `devm_kasprintf` callsite. This should
> resolve the issue.

I'm afraid this patch got swamped in my mailbox and I missed it.

Worse, we've just been discussing and reviewing a patch for the same
issue from another developer:
https://lore.kernel.org/all/20250401091647.22784-1-bsdhenrymartin@gmail.com/

So, I just wanted to acknowlege the mistake. Sorry.


Daniel.