aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c
diff options
context:
space:
mode:
authorDesmond Cheong Zhi Xi <[email protected]>2021-06-20 11:03:26 +0000
committerDaniel Vetter <[email protected]>2021-06-21 15:42:28 +0000
commit1815d9c86e3090477fbde066ff314a7e9721ee0f (patch)
treeb8b020baa41abd8fe9f046745ed84fbeaeb26984 /drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c
parentdrm/atmel-hlcdc: Allow async page flips (diff)
downloadkernel-1815d9c86e3090477fbde066ff314a7e9721ee0f.tar.gz
kernel-1815d9c86e3090477fbde066ff314a7e9721ee0f.zip
drm: add a locked version of drm_is_current_master
While checking the master status of the DRM file in drm_is_current_master(), the device's master mutex should be held. Without the mutex, the pointer fpriv->master may be freed concurrently by another process calling drm_setmaster_ioctl(). This could lead to use-after-free errors when the pointer is subsequently dereferenced in drm_lease_owner(). The callers of drm_is_current_master() from drm_auth.c hold the device's master mutex, but external callers do not. Hence, we implement drm_is_current_master_locked() to be used within drm_auth.c, and modify drm_is_current_master() to grab the device's master mutex before checking the master status. Reported-by: Daniel Vetter <[email protected]> Signed-off-by: Desmond Cheong Zhi Xi <[email protected]> Reviewed-by: Emil Velikov <[email protected]> Cc: [email protected] Signed-off-by: Daniel Vetter <[email protected]> Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c')
0 files changed, 0 insertions, 0 deletions