✓ CI.checkpatch: success for series starting with [v2,1/2] drm/xe/vm: move xa_alloc to prevent UAF

Patchwork patchwork at emeril.freedesktop.org
Thu Sep 26 09:14:33 UTC 2024


== Series Details ==

Series: series starting with [v2,1/2] drm/xe/vm: move xa_alloc to prevent UAF
URL   : https://patchwork.freedesktop.org/series/139079/
State : success

== Summary ==

+ KERNEL=/kernel
+ git clone https://gitlab.freedesktop.org/drm/maintainer-tools mt
Cloning into 'mt'...
warning: redirecting to https://gitlab.freedesktop.org/drm/maintainer-tools.git/
+ git -C mt rev-list -n1 origin/master
30ab6715fc09baee6cc14cb3c89ad8858688d474
+ cd /kernel
+ git config --global --add safe.directory /kernel
+ git log -n1
commit 891a608472b5c82e63d0c37bfb334b4439093340
Author: Matthew Auld <matthew.auld at intel.com>
Date:   Wed Sep 25 08:14:28 2024 +0100

    drm/xe/queue: move xa_alloc to prevent UAF
    
    Evil user can guess the next id of the queue before the ioctl completes
    and then call queue destroy ioctl to trigger UAF since create ioctl is
    still referencing the same queue. Move the xa_alloc all the way to the end
    to prevent this.
    
    v2:
     - Rebase
    
    Fixes: 2149ded63079 ("drm/xe: Fix use after free when client stats are captured")
    Signed-off-by: Matthew Auld <matthew.auld at intel.com>
    Cc: Matthew Brost <matthew.brost at intel.com>
    Reviewed-by: Nirmoy Das <nirmoy.das at intel.com>
    Reviewed-by: Matthew Brost <matthew.brost at intel.com>
+ /mt/dim checkpatch 6b498b1015e38b1b7dbd1c7e3ab0a9be5d48f4da drm-intel
e6d25a32aebf drm/xe/vm: move xa_alloc to prevent UAF
891a608472b5 drm/xe/queue: move xa_alloc to prevent UAF




More information about the Intel-xe mailing list