diff options
| author | Asahi Lina <lina@asahilina.net> | 2023-04-06 01:37:39 +0900 |
|---|---|---|
| committer | Luben Tuikov <luben.tuikov@amd.com> | 2023-04-06 17:30:16 -0400 |
| commit | 1e1d3574e69f70b848f9d50eca2c5ff04931b7ba (patch) | |
| tree | 87ca3719a977c22a0bf243052bb17b71624b5ada /drivers/gpu/drm/drm_fbdev_generic.c | |
| parent | 0ec8671837a61d841462179686c5819d951d3b10 (diff) | |
drm/scheduler: Fix UAF race in drm_sched_entity_push_job()
After a job is pushed into the queue, it is owned by the scheduler core
and may be freed at any time, so we can't write nor read the submit
timestamp after that point.
Fixes oopses observed with the drm/asahi driver, found with kASAN.
Signed-off-by: Asahi Lina <lina@asahilina.net>
Link: https://lore.kernel.org/r/20230406-scheduler-uaf-2-v1-1-972531cf0a81@asahilina.net
Reviewed-by: Luben Tuikov <luben.tuikov@amd.com>
Signed-off-by: Luben Tuikov <luben.tuikov@amd.com>
Diffstat (limited to 'drivers/gpu/drm/drm_fbdev_generic.c')
0 files changed, 0 insertions, 0 deletions