]> git.baikalelectronics.ru Git - kernel.git/commit
drm/i915: Fix a use-after-free in intel_execlists_retire_requests
authorNick Hoath <nicholas.hoath@intel.com>
Thu, 29 Jan 2015 16:55:07 +0000 (16:55 +0000)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Fri, 30 Jan 2015 18:38:13 +0000 (19:38 +0100)
commitd281e7c9873300f8a1b9ad0ffd31b53237b48795
tree8e1a3a04253a1741dd0626b1dd5c9f7e623d8bb0
parentdc963725eb6569de2f11c5a2e61e0fe1cda772e7
drm/i915: Fix a use-after-free in intel_execlists_retire_requests

Remove request from list before unreferencing it, in case it's actually
the only reference. (Found by Tvrtko Ursulin)

This issue has been most likely introduced in

commit 01a723e38850e7355c660572998b064b953f2832
Author: Nick Hoath <nicholas.hoath@intel.com>
Date:   Thu Jan 15 13:10:39 2015 +0000

    drm/i915: Subsume intel_ctx_submit_request in to drm_i915_gem_request

Signed-off-by: Nick Hoath <nicholas.hoath@intel.com>
Reviewed-by: Mika Kuoppala <mika.kuoppala@intel.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
drivers/gpu/drm/i915/intel_lrc.c