diff options
| author | Matthew Auld <[email protected]> | 2024-09-25 08:14:27 +0100 |
|---|---|---|
| committer | Lucas De Marchi <[email protected]> | 2024-10-03 01:22:05 -0500 |
| commit | 74231870cf4976f69e83aa24f48edb16619f652f (patch) | |
| tree | ffbaeb8fc1c74f6d368f30b957e54cd694174e6f /rust/helpers/build_bug.c | |
| parent | 9e3c85ddea7a473ed57b6cdfef2dfd468356fc91 (diff) | |
drm/xe/vm: move xa_alloc to prevent UAF
Evil user can guess the next id of the vm before the ioctl completes and
then call vm destroy ioctl to trigger UAF since create ioctl is still
referencing the same vm. Move the xa_alloc all the way to the end to
prevent this.
v2:
- Rebase
Fixes: dd08ebf6c352 ("drm/xe: Introduce a new DRM driver for Intel GPUs")
Signed-off-by: Matthew Auld <[email protected]>
Cc: Matthew Brost <[email protected]>
Cc: <[email protected]> # v6.8+
Reviewed-by: Nirmoy Das <[email protected]>
Reviewed-by: Matthew Brost <[email protected]>
Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
(cherry picked from commit dcfd3971327f3ee92765154baebbaece833d3ca9)
Signed-off-by: Lucas De Marchi <[email protected]>
Diffstat (limited to 'rust/helpers/build_bug.c')
0 files changed, 0 insertions, 0 deletions