From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Auld Subject: [PATCH] drm: fix send_vblank_event use-after-free error Date: Mon, 20 Jun 2016 17:42:46 +0100 Message-ID: <1466440966-5410-1-git-send-email-matthew.auld@intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: intel-gfx-bounces@lists.freedesktop.org Sender: "Intel-gfx" To: intel-gfx@lists.freedesktop.org Cc: Daniel Vetter , dri-devel@lists.freedesktop.org List-Id: intel-gfx@lists.freedesktop.org VGhlIGRybV9wZW5kaW5nX2V2ZW50IGNhbiBiZSBmcmVlZCBieSBkcm1fc2VuZF9ldmVudF9sb2Nr ZWQsIGFzIGEKcmVzdWx0IHdlIHNob3VsZCBjYWxsIHRyYWNlX2RybV92YmxhbmtfZXZlbnRfZGVs aXZlcmVkIGJlZm9yZSB0aGlzCnRvIGF2b2lkIGhpdHRpbmcgYSB1c2VyLWFmdGVyLWZyZWUgZXJy b3Igd2hlbiBhY2Nlc3NpbmcgdGhlIHBpZCBtZW1iZXI6CgpbICAzNzguNDM4NDk3XSBCVUc6IEtB U0FOOiB1c2UtYWZ0ZXItZnJlZSBpbiBzZW5kX3ZibGFua19ldmVudCsweGYwLzB4MzEwIFtkcm1d IGF0IGFkZHIgZmZmZjg4MDFhYzdlNTBhMApbICAzNzguNDM4NTAwXSBSZWFkIG9mIHNpemUgNCBi eSB0YXNrIFhvcmcvMTU2MgpbICAzNzguNDM4NTAxXSA9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpbICAz NzguNDM4NTA0XSBCVUcga21hbGxvYy0xMjggKFRhaW50ZWQ6IEcgICAgQiAgICAgICAgICApOiBr YXNhbjogYmFkIGFjY2VzcyBkZXRlY3RlZApbICAzNzguNDM4NTA2XSAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQoKWyAgMzc4LjQzODUwOV0gSU5GTzogRnJlZWQgaW4gMHgxMDAwMTMwOWMgYWdlPTE4NDQ2 NzM3MzY5MjY1NjgwNTc1IGNwdT0wIHBpZD0wClsgIDM3OC40Mzg1NDFdICBkcm1fc2VuZF9ldmVu dF9sb2NrZWQrMHgyMDcvMHgyZjAgW2RybV0KWyAgMzc4LjQzODU0NF0gIF9fc2xhYl9mcmVlKzB4 MjRjLzB4NjUwClsgIDM3OC40Mzg1NDZdICBrZnJlZSsweDNhMi8weDc2MApbICAzNzguNDM4NTc4 XSAgZHJtX3NlbmRfZXZlbnRfbG9ja2VkKzB4MjA3LzB4MmYwIFtkcm1dClsgIDM3OC40Mzg2MTBd ICBzZW5kX3ZibGFua19ldmVudCsweGI3LzB4MzEwIFtkcm1dClsgIDM3OC40Mzg2NDNdICBkcm1f Y3J0Y19zZW5kX3ZibGFua19ldmVudCsweDEzMC8weDFmMCBbZHJtXQpbICAzNzguNDM4NzIyXSAg aW50ZWxfYXRvbWljX2NvbW1pdF90YWlsKzB4MjNiNS8weDUzZjAgW2k5MTVdClsgIDM3OC40Mzg4 MDJdICBpbnRlbF9hdG9taWNfY29tbWl0KzB4YmFlLzB4MTJmMCBbaTkxNV0KWyAgMzc4LjQzODgz OV0gIGRybV9hdG9taWNfY29tbWl0KzB4YjAvMHgxMjAgW2RybV0KWyAgMzc4LjQzODg1NV0gIGRy bV9hdG9taWNfaGVscGVyX2Nvbm5lY3Rvcl9kcG1zKzB4MzM5LzB4NWQwIFtkcm1fa21zX2hlbHBl cl0KWyAgMzc4LjQzODg5MV0gIGRybV9tb2RlX29ial9zZXRfcHJvcGVydHlfaW9jdGwrMHg4ZjEv MHhjYzAgW2RybV0KWyAgMzc4LjQzODkyN10gIGRybV9tb2RlX2Nvbm5lY3Rvcl9wcm9wZXJ0eV9z ZXRfaW9jdGwrMHhmMy8weDE3MCBbZHJtXQpbICAzNzguNDM4OTU5XSAgZHJtX2lvY3RsKzB4MmQ3 LzB4YWUwIFtkcm1dClsgIDM3OC40Mzg5NjJdICBkb192ZnNfaW9jdGwrMHgxYzkvMHgxMjgwClsg IDM3OC40Mzg5NjRdICBTeVNfaW9jdGwrMHg3OS8weDkwClsgIDM3OC40Mzg5NjddICBlbnRyeV9T WVNDQUxMXzY0X2Zhc3RwYXRoKzB4MWEvMHhhNAoKQ2M6IGRyaS1kZXZlbEBsaXN0cy5mcmVlZGVz a3RvcC5vcmcKQ2M6IERhbmllbCBWZXR0ZXIgPGRhbmllbC52ZXR0ZXJAaW50ZWwuY29tPgpTaWdu ZWQtb2ZmLWJ5OiBNYXR0aGV3IEF1bGQgPG1hdHRoZXcuYXVsZEBpbnRlbC5jb20+Ci0tLQogZHJp dmVycy9ncHUvZHJtL2RybV9pcnEuYyB8IDQgKystLQogMSBmaWxlIGNoYW5nZWQsIDIgaW5zZXJ0 aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9kcml2ZXJzL2dwdS9kcm0vZHJt X2lycS5jIGIvZHJpdmVycy9ncHUvZHJtL2RybV9pcnEuYwppbmRleCA3NmUzOWM1Li44Y2EzZDJi IDEwMDY0NAotLS0gYS9kcml2ZXJzL2dwdS9kcm0vZHJtX2lycS5jCisrKyBiL2RyaXZlcnMvZ3B1 L2RybS9kcm1faXJxLmMKQEAgLTk5NCwxMCArOTk0LDEwIEBAIHN0YXRpYyB2b2lkIHNlbmRfdmJs YW5rX2V2ZW50KHN0cnVjdCBkcm1fZGV2aWNlICpkZXYsCiAJZS0+ZXZlbnQudHZfc2VjID0gbm93 LT50dl9zZWM7CiAJZS0+ZXZlbnQudHZfdXNlYyA9IG5vdy0+dHZfdXNlYzsKIAotCWRybV9zZW5k X2V2ZW50X2xvY2tlZChkZXYsICZlLT5iYXNlKTsKLQogCXRyYWNlX2RybV92YmxhbmtfZXZlbnRf ZGVsaXZlcmVkKGUtPmJhc2UucGlkLCBlLT5waXBlLAogCQkJCQkgZS0+ZXZlbnQuc2VxdWVuY2Up OworCisJZHJtX3NlbmRfZXZlbnRfbG9ja2VkKGRldiwgJmUtPmJhc2UpOwogfQogCiAvKioKLS0g CjIuNS41CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpJ bnRlbC1nZnggbWFpbGluZyBsaXN0CkludGVsLWdmeEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0 cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9pbnRlbC1nZngK