OSDN Git Service

drm/i915: Avoid potential vm use-after-free
authorRob Clark <robdclark@chromium.org>
Thu, 19 Jan 2023 17:32:58 +0000 (09:32 -0800)
committerTvrtko Ursulin <tvrtko.ursulin@intel.com>
Fri, 27 Jan 2023 13:44:27 +0000 (13:44 +0000)
commit99343c46d4e2b34c285d3d5f68ff04274c2f9fb4
tree2197fac01824ea2d0c7cf88ac7bceed0113fcd32
parent7649a5d1f263b8cc5c2827ef0443ead9bee9ae0e
drm/i915: Avoid potential vm use-after-free

Adding the vm to the vm_xa table makes it visible to userspace, which
could try to race with us to close the vm.  So we need to take our extra
reference before putting it in the table.

Signed-off-by: Rob Clark <robdclark@chromium.org>
Reviewed-by: Matthew Auld <matthew.auld@intel.com>
Fixes: 9ec8795e7d91 ("drm/i915: Drop __rcu from gem_context->vm")
Cc: <stable@vger.kernel.org> # v5.16+
Signed-off-by: Tvrtko Ursulin <tvrtko.ursulin@intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20230119173321.2825472-1-robdclark@gmail.com
drivers/gpu/drm/i915/gem/i915_gem_context.c