(subset) [PATCH v3 1/2] drm/tests: helpers: Avoid a driver uaf

Maxime Ripard mripard at kernel.org
Thu Sep 14 11:59:22 UTC 2023


On Thu, 07 Sep 2023 15:53:38 +0200, Thomas Hellström wrote:
> when using __drm_kunit_helper_alloc_drm_device() the driver may be
> dereferenced by device-managed resources up until the device is
> freed, which is typically later than the kunit-managed resource code
> frees it. Fix this by simply make the driver device-managed as well.
> 
> In short, the sequence leading to the UAF is as follows:
> 
> [...]

Applied to drm/drm-misc (drm-misc-fixes).

Thanks!
Maxime



More information about the dri-devel mailing list