Re: [PATCH] dmabuf: fix dmabuf file poll uaf issue

2024-04-17 Thread zhiguojiang
在 2024/4/15 19:57, Christian König 写道: [Some people who received this message don't often get email from christian.koe...@amd.com. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Am 15.04.24 um 12:35 schrieb zhiguojiang: 在 2024/4/12 14:39, Christian Kön

Re: [PATCH] dmabuf: fix dmabuf file poll uaf issue

2024-04-15 Thread zhiguojiang
在 2024/4/12 14:39, Christian König 写道: [Some people who received this message don't often get email from christian.koe...@amd.com. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Am 12.04.24 um 08:19 schrieb zhiguojiang: [SNIP] -> Here task 2220

Re: [PATCH] dmabuf: fix dmabuf file poll uaf issue

2024-04-11 Thread zhiguojiang
在 2024/4/3 2:22, T.J. Mercier 写道: [你通常不会收到来自 tjmerc...@google.com 的电子邮件。请访问 https://aka.ms/LearnAboutSenderIdentification,以了解这一点为什么很重要] On Tue, Apr 2, 2024 at 1:08 AM Christian König wrote: Am 02.04.24 um 08:49 schrieb zhiguojiang: As far as I can see that's not because of the DM

Re: [PATCH] dmabuf: fix dmabuf file poll uaf issue

2024-04-01 Thread zhiguojiang
As far as I can see that's not because of the DMA-buf code, but because you are somehow using this interface incorrectly. When dma_buf_poll() is called it is mandatory for the caller to hold a reference to the file descriptor on which the poll operation is executed. So adding code like "if (!

Re: [PATCH] dmabuf: fix dmabuf file poll uaf issue

2024-04-01 Thread zhiguojiang
Hi T.J., What is the most recent kernel version you've seen the bug on? The latest kernel version of the issue we discovered is kernel-6.1.25, and kernel-5.15 also reported this issue. You are closing the dmabuf fd from another thread while it is still part of the epoll interest list? Yes, we