mirror-linux/drivers/gpu/drm/i915/gvt
Pan Bian 41d931459b drm/i915/gvt: fix dropping obj reference twice
The reference count of obj will be decremented twice if error occurs
in dma_buf_fd(). Additionally, attempting to read the reference count of
obj after dropping reference may lead to a use after free bug. Here, we
drop obj's reference until it is not used.

Fixes: e546e281d3 ("drm/i915/gvt: Dmabuf support for GVT-g")
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Zhenyu Wang <zhenyuw@linux.intel.com>
Signed-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>
2019-11-08 11:04:07 +08:00
..
Makefile
aperture_gm.c drm/i915: Track ggtt fence reservations under its own mutex 2019-08-22 08:53:40 +01:00
cfg_space.c
cmd_parser.c Merge drm/drm-next into drm-intel-next-queued 2019-08-22 00:10:36 -07:00
cmd_parser.h
debug.h
debugfs.c drm/i915/gvt: no need to check return value of debugfs_create functions 2019-08-13 17:55:06 +08:00
display.c
display.h
dmabuf.c drm/i915/gvt: fix dropping obj reference twice 2019-11-08 11:04:07 +08:00
dmabuf.h
edid.c
edid.h
execlist.c
execlist.h
fb_decoder.c drm/i915/gvt: Don't use ggtt_validdate_range() with size=0 2019-07-30 14:29:48 +08:00
fb_decoder.h
firmware.c drm/i915: Remove I915_READ_NOTRACE 2019-06-12 15:33:13 +01:00
gtt.c drm/i915/gvt: Warning for invalid ggtt access 2019-07-30 14:29:48 +08:00
gtt.h drm/i915: Drop extern qualifiers from header function prototypes 2019-07-12 13:04:54 +01:00
gvt.c drm/i915/gvt: no need to check return value of debugfs_create functions 2019-08-13 17:55:06 +08:00
gvt.h drm/i915/gvt: factor out tlb and mocs register offset table 2019-08-13 17:55:06 +08:00
handlers.c drm/i915/gvt: ignore unexpected pvinfo write 2019-06-17 15:45:41 +08:00
hypercall.h
interrupt.c drm/i915/gvt: Fix typo of VBLANK_TIMER_PERIOD 2019-08-13 17:54:41 +08:00
interrupt.h
kvmgt.c Merge drm/drm-next into drm-intel-next-queued 2019-08-22 00:10:36 -07:00
mmio.c
mmio.h
mmio_context.c drm/i915/gvt: factor out tlb and mocs register offset table 2019-08-13 17:55:06 +08:00
mmio_context.h
mpt.h
opregion.c drm/i915: move modesetting core code under display/ 2019-06-17 11:48:32 +03:00
page_track.c
page_track.h
reg.h
sched_policy.c drm/i915: update rpm_get/put to use the rpm structure 2019-06-14 15:58:33 +01:00
sched_policy.h
scheduler.c drm main pull for 5.4-rc1 2019-09-19 16:24:24 -07:00
scheduler.h
trace.h
trace_points.c drm/i915/gvt: remove duplicate include of trace.h 2019-07-30 14:26:30 +08:00
vgpu.c drm/i915/gvt: no need to check return value of debugfs_create functions 2019-08-13 17:55:06 +08:00