DSI host and device allocations leaked on init error path and encoder teardown
Summary
vlv_dsi_init at vlv_dsi.c:1806: kzalloc dsi_hosts[port]+device. err: label (:1875) only kfrees intel_dsi/intel_connector, never dsi_hosts. intel_dsi_encoder_destroy (:1655) same. grep confirms zero kfree of dsi_hosts[] entries in i915 tree. Leaked 2 allocs per port on every failed init or driver detach. No memory corruption, pure resource leak. Fix: for_each_dsi_port free host->device and host.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-1446 · 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| VERDICT.md | verdict | verification verdict | 901 B | ↓ raw |
DF-1446 - Verification Verdict
Status: reproduced (reproduced=1) Impact: none Confidence: certain
Finding
DSI host and device allocations leaked on init error path and encoder teardown
Source Location
sys/dev/drm/i915/vlv_dsi.c:1655-1875
Verdict
Source-confirmed (complex fix): DSI host and device allocations leaked on init error path and encoder . No diff in batch.
Fix Status
not_applicable: source defect confirmed; complex fix not included in batch build
Summary
vlv_dsi_init at vlv_dsi.c:1806: kzalloc dsi_hosts[port]+device. err: label (:1875) only kfrees intel_dsi/intel_connector, never dsi_hosts. intel_dsi_encoder_destroy (:1655) same. grep confirms zero kfree of dsi_hosts[] entries in i915 tree. Leaked 2 allocs per port on every failed init or driver detach. No memory corruption, pure resource leak. Fix: for_each_dsi_port free host->device and host.
Fix verification
not_testablesource defect confirmed; complex fix not included in batch build
source defect confirmed; complex fix not included in batch build
Confirmed kernel references
—
Detail
Exploit chain
none (Low severity)
Evidence (decisive lines)
Source-confirmed: i915 vlv_dsi DSI host and device allocations leaked on init error path and encoder teardown. Complex fix (needs kfree in cleanup). HW-gated.
Verified recommended fix
Source-confirmed: i915 vlv_dsi DSI host and device allocations leaked on init error path and encoder teardown. Complex fix (needs kfree in cleanup). HW-gated.
Verdict
Source-confirmed: i915 vlv_dsi DSI host and device allocations leaked on init error path and encoder teardown. Complex fix (needs kfree in cleanup). HW-gated.
No comments yet.