Re: [PATCH] drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl

2023-05-31 Thread lm0963
Hi Andi, On Wed, May 31, 2023 at 4:19 PM Andi Shyti wrote: > > Hi Min, > > > > > If it is async, runqueue_node is freed in g2d_runqueue_worker on another > > > > worker thread. So in extreme cases, if g2d_runqueue_worker runs first, > > > > and > > > > then executes the following if statement, t

Re: [PATCH] drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl

2023-05-30 Thread lm0963
Hi Andi, On Wed, May 31, 2023 at 6:21 AM Andi Shyti wrote: > > Hi Min, > > On Fri, May 26, 2023 at 09:01:31PM +0800, Min Li wrote: > > If it is async, runqueue_node is freed in g2d_runqueue_worker on another > > worker thread. So in extreme cases, if g2d_runqueue_worker runs first, and > > then e