Skip to content

ipc: use-after-free fixes #10917

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lgirdwood merged 2 commits into from
Jun 17, 2026
Merged

ipc: use-after-free fixes #10917

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f9ffa46
ipc4: chain_dma: free stale ipc_comp_dev on error path
abonislawski Jun 11, 2026
2bcaf7b
ipc: clear dangling pipeline comp refs on instance free
abonislawski Jun 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions src/ipc/ipc4/handler-user.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -601,6 +601,8 @@ __cold static int ipc4_process_chain_dma(struct ipc4_message_request *ipc4)
ret = ipc4_chain_dma_state(cdma_comp->cd, &cdma);
if (ret < 0) {
comp_free(cdma_comp->cd);
list_item_del(&cdma_comp->list);
rfree(cdma_comp);

@lyakh lyakh Jun 16, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

interesting... how about below after line 613 - is the same needed?

@lgirdwood lgirdwood Jun 17, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@abonislawski can you check and follow up if needed. Thanks !

return IPC4_FAILURE;
}

Expand Down