On Wed Oct 8 16:55:03 2025 +0800, Haoxiang Li wrote:
> Add mtk_mdp_unregister_m2m_device() on the error handling path to prevent
> resource leak.
> 
> Add check for the return value of vpu_get_plat_device() to prevent null
> pointer dereference. And vpu_get_plat_device() increases the reference
> count of the returned platform device. Add platform_device_put() to
> prevent reference leak.
> 
> Fixes: c8eb2d7e8202 ("[media] media: Add Mediatek MDP Driver")
> Cc: [email protected]
> Signed-off-by: Haoxiang Li <[email protected]>
> Signed-off-by: Nicolas Dufresne <[email protected]>
> Signed-off-by: Hans Verkuil <[email protected]>

Patch committed.

Thanks,
Hans Verkuil

 drivers/media/platform/mediatek/mdp/mtk_mdp_core.c | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

---

diff --git a/drivers/media/platform/mediatek/mdp/mtk_mdp_core.c 
b/drivers/media/platform/mediatek/mdp/mtk_mdp_core.c
index 80fdc6ff57e0..f78fa30f1864 100644
--- a/drivers/media/platform/mediatek/mdp/mtk_mdp_core.c
+++ b/drivers/media/platform/mediatek/mdp/mtk_mdp_core.c
@@ -194,11 +194,17 @@ static int mtk_mdp_probe(struct platform_device *pdev)
        }
 
        mdp->vpu_dev = vpu_get_plat_device(pdev);
+       if (!mdp->vpu_dev) {
+               dev_err(&pdev->dev, "Failed to get vpu device\n");
+               ret = -ENODEV;
+               goto err_vpu_get_dev;
+       }
+
        ret = vpu_wdt_reg_handler(mdp->vpu_dev, mtk_mdp_reset_handler, mdp,
                                  VPU_RST_MDP);
        if (ret) {
                dev_err(&pdev->dev, "Failed to register reset handler\n");
-               goto err_m2m_register;
+               goto err_reg_handler;
        }
 
        platform_set_drvdata(pdev, mdp);
@@ -206,7 +212,7 @@ static int mtk_mdp_probe(struct platform_device *pdev)
        ret = vb2_dma_contig_set_max_seg_size(&pdev->dev, DMA_BIT_MASK(32));
        if (ret) {
                dev_err(&pdev->dev, "Failed to set vb2 dma mag seg size\n");
-               goto err_m2m_register;
+               goto err_reg_handler;
        }
 
        pm_runtime_enable(dev);
@@ -214,6 +220,12 @@ static int mtk_mdp_probe(struct platform_device *pdev)
 
        return 0;
 
+err_reg_handler:
+       platform_device_put(mdp->vpu_dev);
+
+err_vpu_get_dev:
+       mtk_mdp_unregister_m2m_device(mdp);
+
 err_m2m_register:
        v4l2_device_unregister(&mdp->v4l2_dev);
 
_______________________________________________
linuxtv-commits mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to