From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@bugzilla.kernel.org Subject: [Bug 199425] BUG: KASAN: use-after-free in drm_atomic_helper_wait_for_flip_done+0x247/0x260 Date: Mon, 20 Aug 2018 06:28:02 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mail.wl.linuxfoundation.org (mail.wl.linuxfoundation.org [198.145.29.98]) by gabe.freedesktop.org (Postfix) with ESMTPS id EDC2C89E03 for ; Mon, 20 Aug 2018 06:28:03 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id B40B628F42 for ; Mon, 20 Aug 2018 06:28:02 +0000 (UTC) In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org aHR0cHM6Ly9idWd6aWxsYS5rZXJuZWwub3JnL3Nob3dfYnVnLmNnaT9pZD0xOTk0MjUKCi0tLSBD b21tZW50ICMxOCBmcm9tIEpvaGFubmVzIEhpcnRlIChqb2hhbm5lcy5oaXJ0ZUBkYXRlbmtoYW9z LmRlKSAtLS0KWzE4MzMwOS4xOTU5MTNdCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpbMTgzMzA5LjE5NTkzN10gQlVHOiBL QVNBTjogdXNlLWFmdGVyLWZyZWUgaW4KZHJtX2F0b21pY19oZWxwZXJfd2FpdF9mb3JfZmxpcF9k b25lKzB4MjEyLzB4MjcwClsxODMzMDkuMTk1OTQ0XSBSZWFkIG9mIHNpemUgOCBhdCBhZGRyIGZm ZmY4ODAxMTViOTA2YTggYnkgdGFzawprd29ya2VyL3U4OjEvMTI0NjIKClsxODMzMDkuMTk1OTU2 XSBDUFU6IDEgUElEOiAxMjQ2MiBDb21tOiBrd29ya2VyL3U4OjEgTm90IHRhaW50ZWQKNC4xOC4w LTAwMDAxLWc2MWIwZGQ5OTc4YjAgIzE0ClsxODMzMDkuMTk1OTYxXSBIYXJkd2FyZSBuYW1lOiBI UCBIUCBQcm9Cb29rIDY0NSBHMi84MEZFLCBCSU9TIE43NyBWZXIuIDAxLjE1CjAzLzI2LzIwMTgK WzE4MzMwOS4xOTU5NjhdIFdvcmtxdWV1ZTogZXZlbnRzX3VuYm91bmQgY29tbWl0X3dvcmsKWzE4 MzMwOS4xOTU5NzNdIENhbGwgVHJhY2U6ClsxODMzMDkuMTk1OTg1XSAgZHVtcF9zdGFjaysweDVi LzB4OTAKWzE4MzMwOS4xOTU5OTNdICBwcmludF9hZGRyZXNzX2Rlc2NyaXB0aW9uKzB4NjAvMHgy MjkKWzE4MzMwOS4xOTU5OTldICA/IGRybV9hdG9taWNfaGVscGVyX3dhaXRfZm9yX2ZsaXBfZG9u ZSsweDIxMi8weDI3MApbMTgzMzA5LjE5NjAwNV0gIGthc2FuX3JlcG9ydC5jb2xkLjUrMHgyNDEv MHgyZmYKWzE4MzMwOS4xOTYwMTFdICBkcm1fYXRvbWljX2hlbHBlcl93YWl0X2Zvcl9mbGlwX2Rv bmUrMHgyMTIvMHgyNzAKWzE4MzMwOS4xOTYwMjBdICBhbWRncHVfZG1fYXRvbWljX2NvbW1pdF90 YWlsKzB4MjcxOC8weDQwNDAKWzE4MzMwOS4xOTYwMjldICA/IF9yYXdfc3Bpbl91bmxvY2tfaXJx KzB4MzUvMHg1MApbMTgzMzA5LjE5NjAzNF0gID8gd2FpdF9mb3JfY29tcGxldGlvbl90aW1lb3V0 KzB4MjE0LzB4MmQwClsxODMzMDkuMTk2MDQwXSAgPyBjb21taXRfcGxhbmVzX3RvX3N0cmVhbS5j b25zdHByb3AuNDcrMHgxM2IwLzB4MTNiMApbMTgzMzA5LjE5NjA0N10gID8gZmluaXNoX3Rhc2tf c3dpdGNoKzB4MWEwLzB4NzAwClsxODMzMDkuMTk2MDUyXSAgPyBkcm1fYXRvbWljX2hlbHBlcl93 YWl0X2Zvcl9kZXBlbmRlbmNpZXMrMHg0NzgvMHg3ZTAKWzE4MzMwOS4xOTYwNThdICBjb21taXRf dGFpbCsweDkxLzB4ZTAKWzE4MzMwOS4xOTYwNjRdICBwcm9jZXNzX29uZV93b3JrKzB4ODY2LzB4 MTQ2MApbMTgzMzA5LjE5NjA3MV0gIHdvcmtlcl90aHJlYWQrMHg4Mi8weGY2MApbMTgzMzA5LjE5 NjA3Nl0gID8gX3Jhd19zcGluX3VubG9ja19pcnFyZXN0b3JlKzB4M2EvMHg3MApbMTgzMzA5LjE5 NjA4MV0gID8gX19rdGhyZWFkX3BhcmttZSsweDdkLzB4ZjAKWzE4MzMwOS4xOTYwODZdICA/IHJl c2N1ZXJfdGhyZWFkKzB4Y2QwLzB4Y2QwClsxODMzMDkuMTk2MDkwXSAga3RocmVhZCsweDJjZi8w eDM4MApbMTgzMzA5LjE5NjA5NV0gID8ga3RocmVhZF9jcmVhdGVfd29ya2VyKzB4ZDAvMHhkMApb MTgzMzA5LjE5NjEwMF0gIHJldF9mcm9tX2ZvcmsrMHgyMi8weDQwCgpbMTgzMzA5LjE5NjEwOV0g QWxsb2NhdGVkIGJ5IHRhc2sgNTcwOgpbMTgzMzA5LjE5NjExNl0gIGthc2FuX2ttYWxsb2MrMHhi Zi8weGUwClsxODMzMDkuMTk2MTIzXSAga21lbV9jYWNoZV9hbGxvY190cmFjZSsweGYzLzB4MWYw ClsxODMzMDkuMTk2MTI4XSAgZG1fY3J0Y19kdXBsaWNhdGVfc3RhdGUrMHg3My8weDEzMApbMTgz MzA5LjE5NjEzNF0gIGRybV9hdG9taWNfZ2V0X2NydGNfc3RhdGUrMHgxNDIvMHg0MDAKWzE4MzMw OS4xOTYxMzhdICBwYWdlX2ZsaXBfY29tbW9uKzB4NTIvMHgyMjAKWzE4MzMwOS4xOTYxNDJdICBk cm1fYXRvbWljX2hlbHBlcl9wYWdlX2ZsaXArMHhhMS8weDEwMApbMTgzMzA5LjE5NjE0OF0gIGRy bV9tb2RlX3BhZ2VfZmxpcF9pb2N0bCsweGM0Ni8weDEwOTAKWzE4MzMwOS4xOTYxNTJdICBkcm1f aW9jdGxfa2VybmVsKzB4MTkyLzB4MjEwClsxODMzMDkuMTk2MTU2XSAgZHJtX2lvY3RsKzB4M2Vh LzB4ODUwClsxODMzMDkuMTk2MTYxXSAgYW1kZ3B1X2RybV9pb2N0bCsweGM3LzB4MWEwClsxODMz MDkuMTk2MTY1XSAgZG9fdmZzX2lvY3RsKzB4MThlLzB4ZWQwClsxODMzMDkuMTk2MTY5XSAga3N5 c19pb2N0bCsweDViLzB4OTAKWzE4MzMwOS4xOTYxNzNdICBfX3g2NF9zeXNfaW9jdGwrMHg2YS8w eGIwClsxODMzMDkuMTk2MTc3XSAgZG9fc3lzY2FsbF82NCsweDk1LzB4MmYwClsxODMzMDkuMTk2 MTgzXSAgZW50cnlfU1lTQ0FMTF82NF9hZnRlcl9od2ZyYW1lKzB4NDQvMHhhOQoKWzE4MzMwOS4x OTYxODhdIEZyZWVkIGJ5IHRhc2sgNjM0OgpbMTgzMzA5LjE5NjE5M10gIF9fa2FzYW5fc2xhYl9m cmVlKzB4MTI1LzB4MTcwClsxODMzMDkuMTk2MTk3XSAga2ZyZWUrMHg4Yi8weDFjMApbMTgzMzA5 LjE5NjIwMl0gIGRybV9hdG9taWNfc3RhdGVfZGVmYXVsdF9jbGVhcisweDMxMC8weGM0MApbMTgz MzA5LjE5NjIwNl0gIF9fZHJtX2F0b21pY19zdGF0ZV9mcmVlKzB4MzAvMHhjMApbMTgzMzA5LjE5 NjIxMF0gIGRybV9hdG9taWNfaGVscGVyX3VwZGF0ZV9wbGFuZSsweGE3LzB4MzUwClsxODMzMDku MTk2MjE0XSAgX19zZXRwbGFuZV9pbnRlcm5hbCsweDJkMS8weDgyMApbMTgzMzA5LjE5NjIxOF0g IGRybV9tb2RlX2N1cnNvcl91bml2ZXJzYWwrMHgyZjAvMHg5MTAKWzE4MzMwOS4xOTYyMjJdICBk cm1fbW9kZV9jdXJzb3JfY29tbW9uKzB4NDlhLzB4ODgwClsxODMzMDkuMTk2MjI2XSAgZHJtX21v ZGVfY3Vyc29yX2lvY3RsKzB4ODEvMHhiMApbMTgzMzA5LjE5NjIyOV0gIGRybV9pb2N0bF9rZXJu ZWwrMHgxOTIvMHgyMTAKWzE4MzMwOS4xOTYyMzNdICBkcm1faW9jdGwrMHgzZWEvMHg4NTAKWzE4 MzMwOS4xOTYyMzddICBhbWRncHVfZHJtX2lvY3RsKzB4YzcvMHgxYTAKWzE4MzMwOS4xOTYyNDFd ICBkb192ZnNfaW9jdGwrMHgxOGUvMHhlZDAKWzE4MzMwOS4xOTYyNDRdICBrc3lzX2lvY3RsKzB4 NWIvMHg5MApbMTgzMzA5LjE5NjI0OF0gIF9feDY0X3N5c19pb2N0bCsweDZhLzB4YjAKWzE4MzMw OS4xOTYyNTJdICBkb19zeXNjYWxsXzY0KzB4OTUvMHgyZjAKWzE4MzMwOS4xOTYyNTZdICBlbnRy eV9TWVNDQUxMXzY0X2FmdGVyX2h3ZnJhbWUrMHg0NC8weGE5CgpbMTgzMzA5LjE5NjI2M10gVGhl IGJ1Z2d5IGFkZHJlc3MgYmVsb25ncyB0byB0aGUgb2JqZWN0IGF0IGZmZmY4ODAxMTViOTA0ODAK ICAgICAgICAgICAgICAgICB3aGljaCBiZWxvbmdzIHRvIHRoZSBjYWNoZSBrbWFsbG9jLTEwMjQg b2Ygc2l6ZSAxMDI0ClsxODMzMDkuMTk2MjY5XSBUaGUgYnVnZ3kgYWRkcmVzcyBpcyBsb2NhdGVk IDU1MiBieXRlcyBpbnNpZGUgb2YKICAgICAgICAgICAgICAgICAxMDI0LWJ5dGUgcmVnaW9uIFtm ZmZmODgwMTE1YjkwNDgwLCBmZmZmODgwMTE1YjkwODgwKQpbMTgzMzA5LjE5NjI3NF0gVGhlIGJ1 Z2d5IGFkZHJlc3MgYmVsb25ncyB0byB0aGUgcGFnZToKWzE4MzMwOS4xOTYyNzldIHBhZ2U6ZmZm ZmVhMDAwNDU2ZTQwMCBjb3VudDoxIG1hcGNvdW50OjAKbWFwcGluZzpmZmZmODgwM2VmMDAyYzQw IGluZGV4OjB4MCBjb21wb3VuZF9tYXBjb3VudDogMApbMTgzMzA5LjE5NjI4Nl0gZmxhZ3M6IDB4 MjAwMDAwMDAwMDAwODEwMChzbGFifGhlYWQpClsxODMzMDkuMTk2Mjk0XSByYXc6IDIwMDAwMDAw MDAwMDgxMDAgZmZmZmVhMDAwY2ViYTgwMCAwMDAwMDAwMjAwMDAwMDAyCmZmZmY4ODAzZWYwMDJj NDAKWzE4MzMwOS4xOTYzMDBdIHJhdzogMDAwMDAwMDAwMDAwMDAwMCAwMDAwMDAwMDgwMWMwMDFj IDAwMDAwMDAxZmZmZmZmZmYKMDAwMDAwMDAwMDAwMDAwMApbMTgzMzA5LjE5NjMwM10gcGFnZSBk dW1wZWQgYmVjYXVzZToga2FzYW46IGJhZCBhY2Nlc3MgZGV0ZWN0ZWQKClsxODMzMDkuMTk2MzA4 XSBNZW1vcnkgc3RhdGUgYXJvdW5kIHRoZSBidWdneSBhZGRyZXNzOgpbMTgzMzA5LjE5NjMxMl0g IGZmZmY4ODAxMTViOTA1ODA6IGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZi IGZiIGZiCmZiClsxODMzMDkuMTk2MzE3XSAgZmZmZjg4MDExNWI5MDYwMDogZmIgZmIgZmIgZmIg ZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIKZmIKWzE4MzMwOS4xOTYzMjFdID5mZmZm ODgwMTE1YjkwNjgwOiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBm YgpmYgpbMTgzMzA5LjE5NjMyNF0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF4K WzE4MzMwOS4xOTYzMjhdICBmZmZmODgwMTE1YjkwNzAwOiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBm YiBmYiBmYiBmYiBmYiBmYiBmYiBmYgpmYgpbMTgzMzA5LjE5NjMzMl0gIGZmZmY4ODAxMTViOTA3 ODA6IGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiCmZiClsxODMz MDkuMTk2MzM1XQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KWzE4MzMwOS4xOTYzMzhdIERpc2FibGluZyBsb2NrIGRlYnVn Z2luZyBkdWUgdG8ga2VybmVsIHRhaW50CgoKVGhpcyBpcyB3aXRoIGtlcm5lbCA0LjE4LjAgYW5k IHlvdXIgcGF0Y2ggb24gdG9wLgoKLS0gCllvdSBhcmUgcmVjZWl2aW5nIHRoaXMgbWFpbCBiZWNh dXNlOgpZb3UgYXJlIHdhdGNoaW5nIHRoZSBhc3NpZ25lZSBvZiB0aGUgYnVnLgpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpkcmktZGV2ZWwgbWFpbGluZyBs aXN0CmRyaS1kZXZlbEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0cHM6Ly9saXN0cy5mcmVlZGVz a3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9kcmktZGV2ZWwK