All of lore.kernel.org
 help / color / mirror / Atom feed
From: Takashi Iwai <tiwai@suse.de>
To: Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
Cc: yong.zhi@intel.com, alsa-devel@alsa-project.org,
	broonie@kernel.org,
	Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>,
	tiwai@suse.com
Subject: Re: [PATCH] ALSA: hda: fix NULL pointer dereference during suspend
Date: Wed, 29 Jul 2020 18:06:25 +0200	[thread overview]
Message-ID: <s5hft9ae266.wl-tiwai@suse.de> (raw)
In-Reply-To: <862d7184dac6dea172d94b83f2ca7dd29136d2df.camel@linux.intel.com>

On Wed, 29 Jul 2020 17:03:22 +0200,
Ranjani Sridharan wrote:
> 
> On Wed, 2020-07-29 at 09:48 +0200, Takashi Iwai wrote:
> > On Wed, 29 Jul 2020 01:10:11 +0200,
> > Ranjani Sridharan wrote:
> > > When the ASoC card registration fails and the codec component
> > > driver
> > > never probes, the codec device is not initialized and therefore
> > > memory for codec->wcaps is not allocated. This results in a NULL
> > > pointer
> > > dereference when the codec driver suspend callback is invoked
> > > during
> > > system suspend. Fix this by returning without performing any
> > > actions
> > > during codec suspend/resume if the card was not registered
> > > successfully.
> > > 
> > > Reviewed-by: Pierre-Louis Bossart <
> > > pierre-louis.bossart@linux.intel.com>
> > > Signed-off-by: Ranjani Sridharan <ranjani.sridharan@linux.intel.com
> > > >
> > 
> > The code changes look OK to apply, but I still wonder how the runtime
> > PM gets invoked even if the device is not instantiated properly?
> Hi Takashi,
> 
> Its not runtime PM suspend but rather the system PM suspend callback
> that is invoked when the system is suspended that ends up callling the
> the runtime PM callback. So, the sequence is:
> hda_codec_pm_suspend()
>    -> pm_runtime_force_suspend()
>           -> hda_codec_runtime_suspend()

OK, but the problem is still same.  The basic problem is that the
hda_codec_driver_probe() is called for the hda_codec object that
hasn't been initialized and bypasses to ext_ops.hdev_attach.

So, we can factor out the fundamental part of
snd_hda_codec_device_new() that is irrelevant with the card object and
call it in hdac_hda_dev_probe().  Most of the legacy HD-audio codec
can work without the card object, including suspend/resume.

But this will be a more intensive surgery, and maybe not much worth
for the corner case, so I already applied your patch as is.


thanks,

Takashi

  reply	other threads:[~2020-07-29 16:07 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-07-28 23:10 [PATCH] ALSA: hda: fix NULL pointer dereference during suspend Ranjani Sridharan
2020-07-29  7:48 ` Takashi Iwai
2020-07-29  9:39   ` Mark Brown
2020-07-29 15:03   ` Ranjani Sridharan
2020-07-29 16:06     ` Takashi Iwai [this message]
2020-07-30 13:07       ` Takashi Iwai
2020-07-30 17:33         ` Ranjani Sridharan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=s5hft9ae266.wl-tiwai@suse.de \
    --to=tiwai@suse.de \
    --cc=alsa-devel@alsa-project.org \
    --cc=broonie@kernel.org \
    --cc=pierre-louis.bossart@linux.intel.com \
    --cc=ranjani.sridharan@linux.intel.com \
    --cc=tiwai@suse.com \
    --cc=yong.zhi@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.