From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@bugzilla.kernel.org Subject: [Bug 199425] New: BUG: KASAN: use-after-free in drm_atomic_helper_wait_for_flip_done+0x247/0x260 Date: Tue, 17 Apr 2018 08:01:51 +0000 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mail.wl.linuxfoundation.org (mail.wl.linuxfoundation.org [198.145.29.98]) by gabe.freedesktop.org (Postfix) with ESMTPS id 936C16E0D4 for ; Tue, 17 Apr 2018 08:01:52 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 4DFB028112 for ; Tue, 17 Apr 2018 08:01:52 +0000 (UTC) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org aHR0cHM6Ly9idWd6aWxsYS5rZXJuZWwub3JnL3Nob3dfYnVnLmNnaT9pZD0xOTk0MjUKCiAgICAg ICAgICAgIEJ1ZyBJRDogMTk5NDI1CiAgICAgICAgICAgU3VtbWFyeTogQlVHOiBLQVNBTjogdXNl LWFmdGVyLWZyZWUgaW4KICAgICAgICAgICAgICAgICAgICBkcm1fYXRvbWljX2hlbHBlcl93YWl0 X2Zvcl9mbGlwX2RvbmUrMHgyNDcvMHgyNjAKICAgICAgICAgICBQcm9kdWN0OiBEcml2ZXJzCiAg ICAgICAgICAgVmVyc2lvbjogMi41CiAgICBLZXJuZWwgVmVyc2lvbjogNC4xNy1yYzEKICAgICAg ICAgIEhhcmR3YXJlOiBBbGwKICAgICAgICAgICAgICAgIE9TOiBMaW51eAogICAgICAgICAgICAg IFRyZWU6IE1haW5saW5lCiAgICAgICAgICAgIFN0YXR1czogTkVXCiAgICAgICAgICBTZXZlcml0 eTogbm9ybWFsCiAgICAgICAgICBQcmlvcml0eTogUDEKICAgICAgICAgQ29tcG9uZW50OiBWaWRl byhEUkkgLSBub24gSW50ZWwpCiAgICAgICAgICBBc3NpZ25lZTogZHJpdmVyc192aWRlby1kcmlA a2VybmVsLWJ1Z3Mub3NkbC5vcmcKICAgICAgICAgIFJlcG9ydGVyOiBqb2hhbm5lcy5oaXJ0ZUBk YXRlbmtoYW9zLmRlCiAgICAgICAgUmVncmVzc2lvbjogTm8KCldpdGggZGMgZW5hYmxlZCwgSSBn ZXQgdGhlIGZvbGxvd2luZyB1c2UtYWZ0ZXItZnJlZSBvbiBteSBDYXJyaXpvOgoKWzUzMjEzLjg3 NTgwMF0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Cls1MzIxMy44NzU4MjZdIEJVRzogS0FTQU46IHVzZS1hZnRlci1mcmVl IGluCmRybV9hdG9taWNfaGVscGVyX3dhaXRfZm9yX2ZsaXBfZG9uZSsweDI0Ny8weDI2MApbNTMy MTMuODc1ODM1XSBSZWFkIG9mIHNpemUgOCBhdCBhZGRyIGZmZmY4ODAxMDYzYWFhODggYnkgdGFz awprd29ya2VyL3U4OjMvOTkxMQoKWzUzMjEzLjg3NTg0OF0gQ1BVOiAzIFBJRDogOTkxMSBDb21t OiBrd29ya2VyL3U4OjMgTm90IHRhaW50ZWQKNC4xNy4wLXJjMS0wMDAwMS1nOWU3NzI5ZTlhNjZj ICM1NjYKWzUzMjEzLjg3NTg1NV0gSGFyZHdhcmUgbmFtZTogSFAgSFAgUHJvQm9vayA2NDUgRzIv ODBGRSwgQklPUyBONzcgVmVyLiAwMS4xMgoxMi8xOS8yMDE3Cls1MzIxMy44NzU4NjRdIFdvcmtx dWV1ZTogZXZlbnRzX3VuYm91bmQgY29tbWl0X3dvcmsKWzUzMjEzLjg3NTg3MF0gQ2FsbCBUcmFj ZToKWzUzMjEzLjg3NTg4MV0gIGR1bXBfc3RhY2srMHg1Yi8weDhiCls1MzIxMy44NzU4OTBdICA/ IGRybV9hdG9taWNfaGVscGVyX3dhaXRfZm9yX2ZsaXBfZG9uZSsweDI0Ny8weDI2MApbNTMyMTMu ODc1ODk5XSAgcHJpbnRfYWRkcmVzc19kZXNjcmlwdGlvbisweDY1LzB4MjcwCls1MzIxMy44NzU5 MDddICA/IGRybV9hdG9taWNfaGVscGVyX3dhaXRfZm9yX2ZsaXBfZG9uZSsweDI0Ny8weDI2MApb NTMyMTMuODc1OTEzXSAga2FzYW5fcmVwb3J0KzB4MjMyLzB4MzUwCls1MzIxMy44NzU5MjBdICBk cm1fYXRvbWljX2hlbHBlcl93YWl0X2Zvcl9mbGlwX2RvbmUrMHgyNDcvMHgyNjAKWzUzMjEzLjg3 NTkzMF0gIGFtZGdwdV9kbV9hdG9taWNfY29tbWl0X3RhaWwrMHgxYjE5LzB4NDAxMApbNTMyMTMu ODc1OTQwXSAgPyBfcmF3X3NwaW5fdW5sb2NrX2lycSsweDM1LzB4NTAKWzUzMjEzLjg3NTk0Nl0g ID8gd2FpdF9mb3JfY29tcGxldGlvbl90aW1lb3V0KzB4MjE1LzB4MmIwCls1MzIxMy44NzU5NTNd ICA/IGJ0cmZzX3JtYXBfYmxvY2srMHg5YzAvMHg5YzAKWzUzMjEzLjg3NTk1OV0gID8gZG1fdXBk YXRlX2NydGNzX3N0YXRlKzB4Y2IwLzB4Y2IwCls1MzIxMy44NzU5NjZdICA/IF9yYXdfc3Bpbl91 bmxvY2tfaXJxcmVzdG9yZSsweDNhLzB4NzAKWzUzMjEzLjg3NTk3M10gID8gdHJ5X3RvX3dha2Vf dXArMHhhMS8weGY5MApbNTMyMTMuODc1OTgwXSAgPyBkcm1fYXRvbWljX2hlbHBlcl93YWl0X2Zv cl9kZXBlbmRlbmNpZXMrMHgzZGUvMHg3ZDAKWzUzMjEzLjg3NTk4Nl0gID8gbm9ybWFsX3dvcmtf aGVscGVyKzB4MjczLzB4YTcwCls1MzIxMy44NzU5OTNdICBjb21taXRfdGFpbCsweDk1LzB4ZjAK WzUzMjEzLjg3NjAwMF0gIHByb2Nlc3Nfb25lX3dvcmsrMHg3YzgvMHgxMzMwCls1MzIxMy44NzYw MDZdICA/IF9yYXdfc3Bpbl9sb2NrX2lycSsweDFjLzB4NDAKWzUzMjEzLjg3NjAxM10gIHdvcmtl cl90aHJlYWQrMHhjOS8weGVmMApbNTMyMTMuODc2MDIxXSAgPyBwcm9jZXNzX29uZV93b3JrKzB4 MTMzMC8weDEzMzAKWzUzMjEzLjg3NjAyNl0gIGt0aHJlYWQrMHgyZDYvMHgzOTAKWzUzMjEzLjg3 NjAzMl0gID8ga3RocmVhZF9jcmVhdGVfd29ya2VyKzB4ZDAvMHhkMApbNTMyMTMuODc2MDM4XSAg cmV0X2Zyb21fZm9yaysweDIyLzB4NDAKCls1MzIxMy44NzYwNDldIEFsbG9jYXRlZCBieSB0YXNr IDUwODoKWzUzMjEzLjg3NjA1Nl0gIGthc2FuX2ttYWxsb2MrMHhhMC8weGQwCls1MzIxMy44NzYw NjNdICBrbWVtX2NhY2hlX2FsbG9jX3RyYWNlKzB4ZjMvMHgxZjAKWzUzMjEzLjg3NjA2OF0gIGRt X2NydGNfZHVwbGljYXRlX3N0YXRlKzB4NzMvMHgxMzAKWzUzMjEzLjg3NjA3NV0gIGRybV9hdG9t aWNfZ2V0X2NydGNfc3RhdGUrMHgxNDIvMHg0MDAKWzUzMjEzLjg3NjA4MF0gIHBhZ2VfZmxpcF9j b21tb24rMHg1Mi8weDIyMApbNTMyMTMuODc2MDg2XSAgZHJtX2F0b21pY19oZWxwZXJfcGFnZV9m bGlwKzB4YTEvMHgxMDAKWzUzMjEzLjg3NjA5M10gIGRybV9tb2RlX3BhZ2VfZmxpcF9pb2N0bCsw eGJlMy8weGZmMApbNTMyMTMuODc2MTAwXSAgZHJtX2lvY3RsX2tlcm5lbCsweDEzZC8weDFkMApb NTMyMTMuODc2MTA2XSAgZHJtX2lvY3RsKzB4NjNkLzB4OTIwCls1MzIxMy44NzYxMTJdICBhbWRn cHVfZHJtX2lvY3RsKzB4YzcvMHgxYTAKWzUzMjEzLjg3NjEyMF0gIGRvX3Zmc19pb2N0bCsweDE3 My8weGRlMApbNTMyMTMuODc2MTI1XSAga3N5c19pb2N0bCsweDZiLzB4ODAKWzUzMjEzLjg3NjEz MF0gIF9feDY0X3N5c19pb2N0bCsweDZhLzB4YjAKWzUzMjEzLjg3NjEzN10gIGRvX3N5c2NhbGxf NjQrMHg5NS8weDJmMApbNTMyMTMuODc2MTQyXSAgZW50cnlfU1lTQ0FMTF82NF9hZnRlcl9od2Zy YW1lKzB4NDQvMHhhOQoKWzUzMjEzLjg3NjE0OV0gRnJlZWQgYnkgdGFzayA2Mzc6Cls1MzIxMy44 NzYxNTRdICBfX2thc2FuX3NsYWJfZnJlZSsweDEzMC8weDE4MApbNTMyMTMuODc2MTU5XSAga2Zy ZWUrMHg4Yi8weDFjMApbNTMyMTMuODc2MTY0XSAgZHJtX2F0b21pY19zdGF0ZV9kZWZhdWx0X2Ns ZWFyKzB4MmM1LzB4YTAwCls1MzIxMy44NzYxNjldICBfX2RybV9hdG9taWNfc3RhdGVfZnJlZSsw eDMwLzB4YzAKWzUzMjEzLjg3NjE3NF0gIGRybV9hdG9taWNfaGVscGVyX3VwZGF0ZV9wbGFuZSsw eGI2LzB4MzUwCls1MzIxMy44NzYxNzldICBfX3NldHBsYW5lX2ludGVybmFsKzB4NDhjLzB4N2Yw Cls1MzIxMy44NzYxODRdICBkcm1fbW9kZV9jdXJzb3JfdW5pdmVyc2FsKzB4MmU3LzB4OTcwCls1 MzIxMy44NzYxODldICBkcm1fbW9kZV9jdXJzb3JfY29tbW9uKzB4NDkzLzB4ODYwCls1MzIxMy44 NzYxOTRdICBkcm1fbW9kZV9jdXJzb3JfaW9jdGwrMHg3YS8weGEwCls1MzIxMy44NzYxOTldICBk cm1faW9jdGxfa2VybmVsKzB4MTNkLzB4MWQwCls1MzIxMy44NzYyMDNdICBkcm1faW9jdGwrMHg2 M2QvMHg5MjAKWzUzMjEzLjg3NjIwN10gIGFtZGdwdV9kcm1faW9jdGwrMHhjNy8weDFhMApbNTMy MTMuODc2MjEyXSAgZG9fdmZzX2lvY3RsKzB4MTczLzB4ZGUwCls1MzIxMy44NzYyMTZdICBrc3lz X2lvY3RsKzB4NmIvMHg4MApbNTMyMTMuODc2MjIxXSAgX194NjRfc3lzX2lvY3RsKzB4NmEvMHhi MApbNTMyMTMuODc2MjI1XSAgZG9fc3lzY2FsbF82NCsweDk1LzB4MmYwCls1MzIxMy44NzYyMzBd ICBlbnRyeV9TWVNDQUxMXzY0X2FmdGVyX2h3ZnJhbWUrMHg0NC8weGE5CgpbNTMyMTMuODc2MjM5 XSBUaGUgYnVnZ3kgYWRkcmVzcyBiZWxvbmdzIHRvIHRoZSBvYmplY3QgYXQgZmZmZjg4MDEwNjNh YTg4MAogICAgICAgICAgICAgICAgd2hpY2ggYmVsb25ncyB0byB0aGUgY2FjaGUga21hbGxvYy0x MDI0IG9mIHNpemUgMTAyNApbNTMyMTMuODc2MjQ3XSBUaGUgYnVnZ3kgYWRkcmVzcyBpcyBsb2Nh dGVkIDUyMCBieXRlcyBpbnNpZGUgb2YKICAgICAgICAgICAgICAgIDEwMjQtYnl0ZSByZWdpb24g W2ZmZmY4ODAxMDYzYWE4ODAsIGZmZmY4ODAxMDYzYWFjODApCls1MzIxMy44NzYyNTJdIFRoZSBi dWdneSBhZGRyZXNzIGJlbG9uZ3MgdG8gdGhlIHBhZ2U6Cls1MzIxMy44NzYyNThdIHBhZ2U6ZmZm ZmVhMDAwNDE4ZWEwMCBjb3VudDoxIG1hcGNvdW50OjAKbWFwcGluZzowMDAwMDAwMDAwMDAwMDAw IGluZGV4OjB4MCBjb21wb3VuZF9tYXBjb3VudDogMApbNTMyMTMuODc2MjY4XSBmbGFnczogMHgy MDAwMDAwMDAwMDA4MTAwKHNsYWJ8aGVhZCkKWzUzMjEzLjg3NjI3OF0gcmF3OiAyMDAwMDAwMDAw MDA4MTAwIDAwMDAwMDAwMDAwMDAwMDAgMDAwMDAwMDAwMDAwMDAwMAowMDAwMDAwMTgwMWMwMDFj Cls1MzIxMy44NzYyODRdIHJhdzogZGVhZDAwMDAwMDAwMDEwMCBkZWFkMDAwMDAwMDAwMjAwIGZm ZmY4ODAzZjM0MDJjNDAKMDAwMDAwMDAwMDAwMDAwMApbNTMyMTMuODc2Mjg4XSBwYWdlIGR1bXBl ZCBiZWNhdXNlOiBrYXNhbjogYmFkIGFjY2VzcyBkZXRlY3RlZAoKWzUzMjEzLjg3NjI5NF0gTWVt b3J5IHN0YXRlIGFyb3VuZCB0aGUgYnVnZ3kgYWRkcmVzczoKWzUzMjEzLjg3NjMwMF0gIGZmZmY4 ODAxMDYzYWE5ODA6IGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZi CmZiCls1MzIxMy44NzYzMDVdICBmZmZmODgwMTA2M2FhYTAwOiBmYiBmYiBmYiBmYiBmYiBmYiBm YiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYgpmYgpbNTMyMTMuODc2MzEwXSA+ZmZmZjg4MDEwNjNh YWE4MDogZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIKZmIKWzUz MjEzLjg3NjMxM10gICAgICAgICAgICAgICAgICAgICAgIF4KWzUzMjEzLjg3NjMxOV0gIGZmZmY4 ODAxMDYzYWFiMDA6IGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZi CmZiCls1MzIxMy44NzYzMjRdICBmZmZmODgwMTA2M2FhYjgwOiBmYiBmYiBmYiBmYiBmYiBmYiBm YiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYgpmYgpbNTMyMTMuODc2MzI3XQo9PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KWzUz MjEzLjg3NjMzMV0gRGlzYWJsaW5nIGxvY2sgZGVidWdnaW5nIGR1ZSB0byBrZXJuZWwgdGFpbnQK CgpJJ3ZlIG9idmVydmVkIHRoaXMgYWxyZWFkeSB3aXRoIGtlcm5lbCA0LjE0LCA0LjE1IGFuZCA0 LjE2LgoKLS0gCllvdSBhcmUgcmVjZWl2aW5nIHRoaXMgbWFpbCBiZWNhdXNlOgpZb3UgYXJlIHdh dGNoaW5nIHRoZSBhc3NpZ25lZSBvZiB0aGUgYnVnLgpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwpkcmktZGV2ZWwgbWFpbGluZyBsaXN0CmRyaS1kZXZlbEBs aXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcvbWFpbG1h bi9saXN0aW5mby9kcmktZGV2ZWwK