This series fixes two error-handling issues in the udl DRM driver:
1. Reject short USB control transfers (ret < 2) in udl_read_edid_block()
with -EIO so uninitialized or stale bytes from read_buff[1] are not
copied into the EDID buffer.
2. Call udl_drop_usb(udl) when drm_dev_register() fails in udl_usb_probe()
so the allocated URB list and DMA buffers are released.
Changes in v3:
- Change (ret != 2) to (ret < 2) in udl_read_edid_block(), as requested
by Thomas Zimmermann.
- Add Reviewed-by tag from Thomas Zimmermann to both patches.
Changes in v2:
- Split into two separate patches, as requested by Jani Nikula.
Hui Peng (2):
drm/udl: reject short USB control transfers in udl_read_edid_block()
drm/udl: clean up USB resources if drm_dev_register() fails
drivers/gpu/drm/udl/udl_drv.c | 4 +++-
drivers/gpu/drm/udl/udl_edid.c | 2 +-
2 files changed, 4 insertions(+), 2 deletions(-)