mirror-linux/drivers/gpu/drm/msm
Rob Clark 8103d53f25 drm/msm/gpu: Fix potential double-free
[ Upstream commit a66f1efcf7 ]

If userspace was calling the MSM_SET_PARAM ioctl on multiple threads to
set the COMM or CMDLINE param, it could trigger a race causing the
previous value to be kfree'd multiple times.  Fix this by serializing on
the gpu lock.

Signed-off-by: Rob Clark <robdclark@chromium.org>
Fixes: d4726d7700 ("drm/msm: Add a way to override processes comm/cmdline")
Patchwork: https://patchwork.freedesktop.org/patch/517778/
Link: https://lore.kernel.org/r/20230110212903.1925878-1-robdclark@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-02-01 08:34:09 +01:00
..
adreno drm/msm/gpu: Fix potential double-free 2023-02-01 08:34:09 +01:00
disp drm/msm/dpu: Fix some kernel-doc comments 2023-01-18 11:58:23 +01:00
dp drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer 2023-01-18 11:58:18 +01:00
dsi drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits 2022-12-31 13:32:08 +01:00
hdmi drm/msm/hdmi: use devres helper for runtime PM management 2022-12-31 13:32:07 +01:00
Kconfig drm/msm: Kconfig: Fix spelling mistake "throught" -> "through" 2022-10-14 09:33:12 -07:00
Makefile
NOTES
msm_atomic.c
msm_atomic_trace.h
msm_atomic_tracepoints.c
msm_debugfs.c drm/msm: Add fault-injection support 2022-08-28 08:32:11 -07:00
msm_debugfs.h
msm_drv.c drm/msm: another fix for the headless Adreno GPU 2023-01-18 11:58:16 +01:00
msm_drv.h Merge tag 'drm-msm-next-2022-09-22' of https://gitlab.freedesktop.org/drm/msm into drm-next 2022-09-28 11:35:25 +10:00
msm_fb.c
msm_fbdev.c
msm_fence.c
msm_fence.h
msm_gem.c drm/msm/gem: Add msm_gem_assert_locked() 2022-08-27 09:32:45 -07:00
msm_gem.h drm/msm/gem: Convert to lockdep assert 2022-08-28 08:31:49 -07:00
msm_gem_prime.c drm/msm/gem: Rename to pin/unpin_pages 2022-08-27 09:32:44 -07:00
msm_gem_shrinker.c drm/msm: Fix build break with recent mm tree 2022-09-30 10:13:49 +10:00
msm_gem_submit.c drm/msm: Remove redundant check for 'submit' 2022-10-14 09:33:12 -07:00
msm_gem_vma.c
msm_gpu.c drm/msm/gpu: Fix potential double-free 2023-02-01 08:34:09 +01:00
msm_gpu.h drm/msm/gpu: Fix potential double-free 2023-02-01 08:34:09 +01:00
msm_gpu_devfreq.c drm/msm/gpu: Drop qos request if devm_devfreq_add_device() fails 2022-09-18 09:37:55 -07:00
msm_gpu_trace.h drm/msm/gem: Evict active GEM objects when necessary 2022-08-27 09:32:45 -07:00
msm_gpu_tracepoints.c
msm_gpummu.c
msm_io_utils.c drm/msm: lookup the ICC paths in both mdp5/dpu and mdss devices 2022-09-18 09:38:02 -07:00
msm_iommu.c drm/msm/iommu: optimize map/unmap 2022-08-28 08:32:12 -07:00
msm_kms.h
msm_mdss.c drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path 2023-01-18 11:58:23 +01:00
msm_mmu.h
msm_perf.c
msm_rd.c drm/msm/rd: Fix FIFO-full deadlock 2022-09-18 09:37:55 -07:00
msm_ringbuffer.c drm/msm/gem: Unpin objects slightly later 2022-09-30 09:01:33 -07:00
msm_ringbuffer.h
msm_submitqueue.c drm/msm: Split out idr_lock 2022-08-27 09:32:44 -07:00