diff options
| author | Ezequiel Garcia <[email protected]> | 2020-04-27 21:44:05 +0000 |
|---|---|---|
| committer | Rodrigo Siqueira <[email protected]> | 2020-05-07 01:51:46 +0000 |
| commit | 0ea2ea42b31abc1141f2fd3911f952a97d401fcb (patch) | |
| tree | 47cd2b2a7c0892bbb040ea4914d758414d7bf263 /drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | |
| parent | drm/vkms: enable cursor by default (diff) | |
| download | kernel-0ea2ea42b31abc1141f2fd3911f952a97d401fcb.tar.gz kernel-0ea2ea42b31abc1141f2fd3911f952a97d401fcb.zip | |
drm/vkms: Hold gem object while still in-use
We need to keep the reference to the drm_gem_object
until the last access by vkms_dumb_create.
Therefore, the put the object after it is used.
This fixes a use-after-free issue reported by syzbot.
While here, change vkms_gem_create() symbol to static.
Reported-and-tested-by: [email protected]
Signed-off-by: Ezequiel Garcia <[email protected]>
Reviewed-by: Rodrigo Siqueira <[email protected]>
Signed-off-by: Rodrigo Siqueira <[email protected]>
Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c')
0 files changed, 0 insertions, 0 deletions