linux-kernel - Re: [BISECTED] NULL pointer dereference while probing sun8i-codec

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <87h5y4ytdy.wl-kuninori.morimoto.gx@renesas.com>
Date: Tue, 19 Aug 2025 01:47:37 +0000
From: Kuninori Morimoto <kuninori.morimoto.gx@...esas.com>
To: J. Neuschäfer <j.ne@...teo.net>
Cc: linux-sunxi@...ts.linux.dev,
	linux-sound@...r.kernel.org,
	Mark Brown <broonie@...nel.org>,
	linux-kernel@...r.kernel.org,
	linux-arm-kernel@...ts.infradead.org
Subject: Re: [BISECTED] NULL pointer dereference while probing sun8i-codec


Hi J. Neuschäfer

Thank you for reporting, and sorry for my late response (I was in summer
vacation).

> When booting the Allwinner H2+ SoC (Orange Pi Zero) with the audio codec
> enabled, recent kernels crash with a NULL pointer dereference:
(snip)
> This particular error path is taken after platform_probe returns -EPROBE_DEFER
> to call_driver_probe and really_probe calls device_unbind_cleanup.
> 
> The parameters to the strcmp call in snd_soc_lookup_component_nolocked are
> component->driver->name = NULL and driver_name = "snd_dmaengine_pcm".

Thanks.
I think it is...
	- snd_dmaengine_pcm is sharing same dev with CPU and Platform
	- Platform has driver->name (no problem)
	- CPU doesn't have driver->name (will be NULL pointer access)

I guess your CPU component doesn't have driver->name ?
Anyway, it should care about such case. I will post 2 patches (1st is for
fixup this issue, 2nd is cleanup patch).
Could you please test both patches ?

Thank you for your help !!

Best regards
---
Kuninori Morimoto