Re: [Freedreno] [PATCH V2] drm: hold gem reference until object is no longer accessed

2020-07-27 Thread cohens
On 2020-07-27 16:11, dan...@ffwll.ch wrote: On Mon, Jul 27, 2020 at 09:55:07PM +0200, Greg KH wrote: On Mon, Jul 20, 2020 at 06:30:50PM -0400, Steve Cohen wrote: > A use-after-free in drm_gem_open_ioctl can happen if the > GEM object handle is closed between the idr lookup and > retrieving the s

Re: [PATCH 0/3] allow DRM drivers to limit creation of blobs

2019-11-10 Thread cohens
On 2019-11-08 03:34, Daniel Vetter wrote: On Thu, Nov 07, 2019 at 02:39:11PM -0500, Steve Cohen wrote: Fuzzers used in Android compliance testing repeatedly call the create blob IOCTL which eventually exhausts the system memory. This series adds a hook which allows drivers to impose their own li