On 2022/02/09 6:08, Daniel Vetter wrote:
> @@ -714,6 +700,8 @@ static int con2fb_acquire_newinfo(struct vc_data *vc, 
> struct fb_info *info,
>               ops = kzalloc(sizeof(struct fbcon_ops), GFP_KERNEL);
>               if (!ops)
>                       err = -ENOMEM;
> +
> +             INIT_DELAYED_WORK(&ops->cursor_work, fb_flashcursor);
>       }
>  
>       if (!err) {

Memory allocation fault injection will hit NULL pointer dereference.

Reply via email to