From mboxrd@z Thu Jan  1 00:00:00 1970
From: Tvrtko Ursulin <tvrtko.ursulin@linux.intel.com>
Subject: Re: [PATCH] drm/i915: Avoid use-after-free in reporting
 create.size
Date: Wed, 17 Apr 2019 14:50:03 +0100
Message-ID: <8576d90d-5824-ba64-ea90-a2d39c390682@linux.intel.com>
References: <20190417132507.27133-1-chris@chris-wilson.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Content-Transfer-Encoding: base64
Return-path: <intel-gfx-bounces@lists.freedesktop.org>
Received: from mga12.intel.com (mga12.intel.com [192.55.52.136])
 by gabe.freedesktop.org (Postfix) with ESMTPS id 80F2689861
 for <intel-gfx@lists.freedesktop.org>; Wed, 17 Apr 2019 13:50:06 +0000 (UTC)
In-Reply-To: <20190417132507.27133-1-chris@chris-wilson.co.uk>
Content-Language: en-US
List-Unsubscribe: <https://lists.freedesktop.org/mailman/options/intel-gfx>,
 <mailto:intel-gfx-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <https://lists.freedesktop.org/archives/intel-gfx>
List-Post: <mailto:intel-gfx@lists.freedesktop.org>
List-Help: <mailto:intel-gfx-request@lists.freedesktop.org?subject=help>
List-Subscribe: <https://lists.freedesktop.org/mailman/listinfo/intel-gfx>,
 <mailto:intel-gfx-request@lists.freedesktop.org?subject=subscribe>
Errors-To: intel-gfx-bounces@lists.freedesktop.org
Sender: "Intel-gfx" <intel-gfx-bounces@lists.freedesktop.org>
To: Chris Wilson <chris@chris-wilson.co.uk>, intel-gfx@lists.freedesktop.org
List-Id: intel-gfx@lists.freedesktop.org
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=