Rob Clark bed4b455cf drm/i915: Fix potential context UAFs ... gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer. Signed-off-by: Rob Clark <robdclark@chromium.org> Fixes: eb4dedae92 ("drm/i915/gem: Delay tracking the GEM context until it is registered") Fixes: a4c1cdd34e ("drm/i915/gem: Delay context creation (v3)") Fixes: 49bd54b390 ("drm/i915: Track all user contexts per client") Cc: <stable@vger.kernel.org> # v5.10+ Reviewed-by: Tvrtko Ursulin <tvrtko.ursulin@intel.com> Reviewed-by: Andi Shyti <andi.shyti@linux.intel.com> [tursulin: Stable and fixes tags add/tidy.] Signed-off-by: Tvrtko Ursulin <tvrtko.ursulin@intel.com> Link: https://patchwork.freedesktop.org/patch/msgid/20230103234948.1218393-1-robdclark@gmail.com		2023-01-06 10:10:47 +00:00
..
drm	drm/i915: Fix potential context UAFs	2023-01-06 10:10:47 +00:00
host1x	gpu: host1x: Staticize host1x_syncpt_fence_ops	2022-11-25 16:14:59 +01:00
ipu-v3	…
trace	…
vga	…
Makefile	…