In function virtio_gpu_conn_destroy a pointer to a containing structure
virtio_gpu_output is received using drm_connector_to_virtio_gpu_output
(container_of), and then it is passed to kfree function.
But this pointer points to a member of array (vgdev->outputs + index)
(see vgdev_output_init):
In function virtio_gpu_conn_destroy a pointer to a containing structure
virtio_gpu_output is received using drm_connector_to_virtio_gpu_output
(container_of), and then it is passed to kfree function.
But this pointer points to a member of array (vgdev->outputs + index)
(see vgdev_output_init):