possible use-after-free in amdgpu_dm

[tom.stdenis@xxxxxxx (Tom St Denis)]

In this block of code:

void amdgpu_dm_connector_funcs_reset(struct drm_connector *connector)
{
	struct dm_connector_state *state =
		to_dm_connector_state(connector->state);

	kfree(state);

	state = kzalloc(sizeof(*state), GFP_KERNEL);


The value of state is never compared with NULL and moreso the value of 
connector->state is never written to if NULL.  Wouldn't this mean the 
pointer points to freed memory?

Cheers,
Tom