]> git.baikalelectronics.ru Git - kernel.git/commit
drm/i915: Fix a use-after-free in intel_execlists_retire_requests
authorNick Hoath <nicholas.hoath@intel.com>
Thu, 29 Jan 2015 16:55:07 +0000 (16:55 +0000)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Fri, 30 Jan 2015 18:38:13 +0000 (19:38 +0100)
commitc9f2212acf829a5cd9c98f25af4878a7bbd755a6
tree8e1a3a04253a1741dd0626b1dd5c9f7e623d8bb0
parent6f7d726b0d001637b7b5c975905d8507bbc73e49
drm/i915: Fix a use-after-free in intel_execlists_retire_requests

Remove request from list before unreferencing it, in case it's actually
the only reference. (Found by Tvrtko Ursulin)

This issue has been most likely introduced in

commit a8aed40738a873aa3264268914fbde7b020974f6
Author: Nick Hoath <nicholas.hoath@intel.com>
Date:   Thu Jan 15 13:10:39 2015 +0000

    drm/i915: Subsume intel_ctx_submit_request in to drm_i915_gem_request

Signed-off-by: Nick Hoath <nicholas.hoath@intel.com>
Reviewed-by: Mika Kuoppala <mika.kuoppala@intel.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
drivers/gpu/drm/i915/intel_lrc.c