From nobody Mon Feb 9 11:47:57 2026 Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C97B62853F2 for ; Mon, 29 Dec 2025 06:31:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=205.220.180.131 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766989921; cv=none; b=OXc6ED1SfOc5KGWd+ORj4YZNTxTeToQlsKvcbuMgQZz5puNhfGi5QtqUGgpegH59qPFORm04LFt6Z4U0v6skLuJdi/31q4s9ugfTtnEMnD+PIjJ6/dxdnwF9nw2QqZWzYC2RCWVIIf7XxLVFiwWsTRjfOMYjDsZCsnMit952qrs= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766989921; c=relaxed/simple; bh=v55TNg//wC4XAcaHWZTXoCk9GlnNzZOSKMtmlhh/99s=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=dm3p8CtC+AtYiSlYL05PQGyGQ4hc46qsLB7qXqYIWHs/Vz7VplUcBXzsUVfJHyyhFmxpE1aMqscmstNsDcm0P5CRPrt0QAZTZ0I26YYBgZ4lcVqIsm4eTjXdNpRREtiOJTCJpdD8ZXqp9TY4CHj0XZdtdu8PWvx0P5fl5pyqZiM= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com; spf=pass smtp.mailfrom=oss.qualcomm.com; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b=HkmE7Aug; dkim=pass (2048-bit key) header.d=oss.qualcomm.com header.i=@oss.qualcomm.com header.b=e0UsHvOe; arc=none smtp.client-ip=205.220.180.131 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b="HkmE7Aug"; dkim=pass (2048-bit key) header.d=oss.qualcomm.com header.i=@oss.qualcomm.com header.b="e0UsHvOe" Received: from pps.filterd (m0279870.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 5BSJn1Uf3721871 for ; Mon, 29 Dec 2025 06:31:59 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s=qcppdkim1; bh= aaVi6kTxKFVUUN+LstLP4rB1bASy8KXXeuDqCkR8A3c=; b=HkmE7AugOxT9WlqZ z4vMJHPDN1YMVhBrOqgb8GwUUg+VK+8r/aTQ1FKP3T0VI22dWL5Wo+6EznHE/MhS 7db0ooXdMQQUMGZW8aStYKvEfgk06oQSqZHODoia9XtD2ilmnx5FMq+ujHrdjx+I IZBczZbRfI4BdJCeP2kYloStkyiF3DxV2B8QP1Aw++hr559MPncTSDHGt0rO5RVs 664uCrKTnYSTlpBvsC27EkYEMMUyJolLI6uvr70nyWnFWCrAyg9XGcbOVse/KhH+ LhloOoHsEnpF5xFVlUmOgCLWkzep1GsYHvuvWbBqAlX+98A3agzdwjUzUDOFMvoB YslxLg== Received: from mail-pf1-f198.google.com (mail-pf1-f198.google.com [209.85.210.198]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4ba7hsbjsq-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Mon, 29 Dec 2025 06:31:58 +0000 (GMT) Received: by mail-pf1-f198.google.com with SMTP id d2e1a72fcca58-7bf5cdef41dso15317992b3a.0 for ; Sun, 28 Dec 2025 22:31:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1766989917; x=1767594717; darn=vger.kernel.org; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:from:to:cc:subject:date:message-id :reply-to; bh=aaVi6kTxKFVUUN+LstLP4rB1bASy8KXXeuDqCkR8A3c=; b=e0UsHvOehd9+Y+5Ve9NJF2nBWG4tnZYtNB+VrOVTExW/QEzT01yWVoi4HqBoQ7SNlW b32UzqZ0eB1K8VxigcjyMQjcfvfn45vs1vCLsuG0MxPxGtmOKzoDhpt3rPZdI+QUR1Nt wDZnIniRm6ES6YMPxtPdcAuoPPT0tZa10Z80zj/zWBbl5pXsQGnbe4VC9ZM/u+0k90xh I8FTxkIcNlMHqVdbxHPeiJmREt2IO/D80q8WOj/XVdTbxiZFUD4AYK9mIX0oopRG8JDD pOG34VbzcvFCxmrDULF2Uiyg0d7pnDybA2o7IgzT6kcDo2vSRxEuWir1GW4h7IGeXtaw kvKQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766989917; x=1767594717; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=aaVi6kTxKFVUUN+LstLP4rB1bASy8KXXeuDqCkR8A3c=; b=sW9DhIOPUCM3np26V3PVC9x0knOHh7T4cIT+BpqDgFZFzhV657fvxEMZrGMyG/PlYL znFTpxlxqO2JVg8lL8ql8XqktrJDzEYJqMj5niPXgTFlozDj/niqXmklaSy6Xe9anXzk +nB7MZj3YgtPJZNdQd0Ga5ealkyRh8bogV/kvQ81NhhrqooHMD3cxxXOeDTpYHk6XhAY yBMWnsBjjEScwHgHGrGzDXwot6ZzuXpr/brzp6lhASx1Y7zb6DFYvD++IFW/iPFeO6pC RnrXH/bRPg04NgcFHgqWR79ex0pN1Deripj13PwtWhCsWlYwk9tYhrXGdXK32Whe/AvM GBVQ== X-Forwarded-Encrypted: i=1; AJvYcCXpYaMKdow63MVHjkfLMsCoY409hldIkB8crfxgfQZYQPdiuaogOuEi6aI40Ls4/7sCxPXRMoiZbVn0TbU=@vger.kernel.org X-Gm-Message-State: AOJu0YyATse8DHH6kgZEa95LRcfGcmB7PH9md8jJvn893XdI64Kv7uWp QgDwb0dLrIh0b1mR2N0RgKvtsGkCVuGXpbhW+SysnNL2QH9prUBGyOOio/aJtTfbHetVFNH061C Svn1FXx/m+lLtEYjm5jeEqEOeoGXUtQl44vSMO8IKf8psj7hvbHnrOvuhw2iCBQpar0Y= X-Gm-Gg: AY/fxX62zEHP6YuFOGTdema75/IkEtW2RPiFDnq82RLfosFv85YjiFVEa8Gfoa906hJ XbZj1MJyHMDl0u3CK/L7kbzNIBfgOQ2jSoWJ00xEwcp+wEqfEKr0o+ITCIN9jVjvL9VX9jtgDj3 yM0NQTnaB+m/Yi3RF4gtl8XnjNVas7Hqj3DUZQR5nTdcjUOlkoXyvOw38V1yyV6wBR7hnRp2K8e KCqKf3KzT7ZSP8TsXLWxq/owwySgbmkbF6GMEajXyasTUVtVWVtIRZRd4zOA8r5RDtouOUbrgvr jRNc4y+EWQYEUp9qMLD05NI7Kd86QWcK8fS9nawjt7cVBuYgHMlWfVkIdkDJfr6g8pxShdW7DyX J9qX4js7Qqg9E3dxxDuHMpSsdP4njw+eqiWIJNZYbI0Ur1ks= X-Received: by 2002:a05:6a00:90a2:b0:7e8:4471:ae5c with SMTP id d2e1a72fcca58-7ff67456c12mr24865576b3a.40.1766989917346; Sun, 28 Dec 2025 22:31:57 -0800 (PST) X-Google-Smtp-Source: AGHT+IFX0ThBZeW+BigEL8dzVjUuDuXkQS9otcnHN3QgmHmuY+Fxw19HAteXH2bjW3/rRGKbh+msgQ== X-Received: by 2002:a05:6a00:90a2:b0:7e8:4471:ae5c with SMTP id d2e1a72fcca58-7ff67456c12mr24865542b3a.40.1766989916512; Sun, 28 Dec 2025 22:31:56 -0800 (PST) Received: from hu-dikshita-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7ff7e797ab9sm28308962b3a.59.2025.12.28.22.31.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Dec 2025 22:31:56 -0800 (PST) From: Dikshita Agarwal Date: Mon, 29 Dec 2025 12:01:24 +0530 Subject: [PATCH v2 5/6] media: iris: gen2: Add sanity check for session stop Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Message-Id: <20251229-iris-fixes-v2-5-6dce2063d782@oss.qualcomm.com> References: <20251229-iris-fixes-v2-0-6dce2063d782@oss.qualcomm.com> In-Reply-To: <20251229-iris-fixes-v2-0-6dce2063d782@oss.qualcomm.com> To: Vikash Garodia , Abhinav Kumar , Bryan O'Donoghue , Mauro Carvalho Chehab , Hans Verkuil , Stefan Schmidt , Hans Verkuil , Wangao Wang Cc: linux-media@vger.kernel.org, linux-arm-msm@vger.kernel.org, linux-kernel@vger.kernel.org, Bryan O'Donoghue , Dikshita Agarwal X-Mailer: b4 0.14.2 X-Developer-Signature: v=1; a=ed25519-sha256; t=1766989894; l=1244; i=dikshita.agarwal@oss.qualcomm.com; s=20240917; h=from:subject:message-id; bh=v55TNg//wC4XAcaHWZTXoCk9GlnNzZOSKMtmlhh/99s=; b=56U9/cpxgd6FqwYiSraU5YRmgQlKZvQjxUwJu9bnWBH4JEI/08y9dFRLPfHh/+xjtF+B+JGfa NF/6E/wSsUaCkusbqS9QCk8PZnYWdaoDaGsRTI4lYzhdNj5QXhj5WnQ X-Developer-Key: i=dikshita.agarwal@oss.qualcomm.com; a=ed25519; pk=EEvKY6Ar1OI5SWf44FJ1Ebo1KuQEVbbf5UNPO+UHVhM= X-Proofpoint-GUID: rjT1sHOPXN9cIUVL5UqS_qiLEclBjHm_ X-Authority-Analysis: v=2.4 cv=O4o0fR9W c=1 sm=1 tr=0 ts=6952205e cx=c_pps a=m5Vt/hrsBiPMCU0y4gIsQw==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=IkcTkHD0fZMA:10 a=wP3pNCr1ah4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=EUspDBNiAAAA:8 a=hJpQIKcYsydMz8RtK9gA:9 a=QEXdDO2ut3YA:10 a=IoOABgeZipijB_acs4fv:22 X-Proofpoint-ORIG-GUID: rjT1sHOPXN9cIUVL5UqS_qiLEclBjHm_ X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUxMjI5MDA1NyBTYWx0ZWRfX4sewc9xdQi+G ZGYVvP/ioF6u4+OhZVbRinozMWWY5RUJzsSnRraeB8JNp5papUercGAjqF2Afz0ktCiH5WIGfuW vTVFNvgNWYheDT/bB3Qv7m5PB1AJ6lt+us4mf1g+9vikXaT1UAv81eYaQsxg4tWtaCF8I2NocPQ naRrsmW+XAgA5VDszc9jedWVupoPX23VV5XU8gnKq6sPtvuEE0NB/jDz0wSQjFMl/KqSXePz+13 F6hsHeaCS142QQ4B911+S9e9KF+JQo9GPCgSf4QxjXDd8MAMibs3dLB+JN9gJ0y2ogSVcWfDORv liJnLCUSrcZzjaFYHh1YAGQN13xRY6jEceN1rUgRr+Q1ceUoBi56BTn7F3A2JdisTcc2K9GQkv7 R/KaxJ5ouGsyIpdAEnaCyzilOTYBoiuegqYr49vn6mP9HXXg4kn4y1eCKIxAoHzQVAtlFfLMGA9 BWGB0W13kVr0YbVtOGw== X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.9,FMLib:17.12.100.49 definitions=2025-12-29_01,2025-12-26_01,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 impostorscore=0 spamscore=0 suspectscore=0 lowpriorityscore=0 phishscore=0 bulkscore=0 clxscore=1015 adultscore=0 malwarescore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2512120000 definitions=main-2512290057 In iris_kill_session, inst->state is set to IRIS_INST_ERROR and session_close is executed, which will kfree(inst_hfi_gen2->packet). If stop_streaming is called afterward, it will cause a crash. Add a NULL check for inst_hfi_gen2->packet before sendling STOP packet to firmware to fix that. Fixes: 11712ce70f8e ("media: iris: implement vb2 streaming ops") Signed-off-by: Dikshita Agarwal Reviewed-by: Vikash Garodia --- drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c b/dri= vers/media/platform/qcom/iris/iris_hfi_gen2_command.c index 6a772db2ec33fb002d8884753a41dc98b3a8439d..59e41adcce9aadd7c60bb1d369d= 68a4954f62aef 100644 --- a/drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c +++ b/drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c @@ -963,6 +963,9 @@ static int iris_hfi_gen2_session_stop(struct iris_inst = *inst, u32 plane) struct iris_inst_hfi_gen2 *inst_hfi_gen2 =3D to_iris_inst_hfi_gen2(inst); int ret =3D 0; =20 + if (!inst_hfi_gen2->packet) + return -EINVAL; + reinit_completion(&inst->completion); =20 iris_hfi_gen2_packet_session_command(inst, --=20 2.34.1