RE: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-28 Thread Reshetova, Elena
Hi and sorry for the delayed reply! > Hi Kees, > > On Sat, 25 Nov 2017 12:57:04 -0800 > Kees Cook wrote: > > > On Wed, Nov 22, 2017 at 11:57 PM, Daniel Vetter wrote: > > > On Wed, Nov 22, 2017 at 07:21:00PM +0100, Boris Brezillon wrote: > > >> On Wed, 22 Nov 2017 19:13:09 +0100 > > >> Daniel

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-27 Thread Kees Cook
On Wed, Nov 22, 2017 at 11:57 PM, Daniel Vetter wrote: > On Wed, Nov 22, 2017 at 07:21:00PM +0100, Boris Brezillon wrote: >> On Wed, 22 Nov 2017 19:13:09 +0100 >> Daniel Vetter wrote: >> >> > On Wed, Nov 22, 2017 at 6:51 PM, Boris Brezillon >> > wrote: >> > > Hi Stefan, >> > > >> > > On Wed, 22

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-26 Thread Eric Anholt
Boris Brezillon writes: > Hi Kees, > > On Sat, 25 Nov 2017 12:57:04 -0800 > Kees Cook wrote: > >> On Wed, Nov 22, 2017 at 11:57 PM, Daniel Vetter wrote: >> > On Wed, Nov 22, 2017 at 07:21:00PM +0100, Boris Brezillon wrote: >> >> On Wed, 22 Nov 2017 19:13:09 +0100 >> >> Daniel Vetter wrote: >

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-26 Thread Boris Brezillon
Hi Kees, On Sat, 25 Nov 2017 12:57:04 -0800 Kees Cook wrote: > On Wed, Nov 22, 2017 at 11:57 PM, Daniel Vetter wrote: > > On Wed, Nov 22, 2017 at 07:21:00PM +0100, Boris Brezillon wrote: > >> On Wed, 22 Nov 2017 19:13:09 +0100 > >> Daniel Vetter wrote: > >> > >> > On Wed, Nov 22, 2017 at 6

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-23 Thread Stefan Wahren
Hi Boris, > Boris Brezillon hat am 22. November 2017 > um 18:51 geschrieben: > > > Hi Stefan, > > On Wed, 22 Nov 2017 17:43:35 +0100 (CET) > Stefan Wahren wrote: > ... > > Looks like I didn't test this code with CONFIG_REFCOUNT_FULL enabled :-/. > > Anyway, can you try to apply the followi

[BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-23 Thread Stefan Wahren
Hi Boris, if i boot Raspberry Pi 3 (ARM64, defconfig, linux-next-20171122) with sufficient CMA memory (32 MB), i'll get this warning during boot: [7.623510] vc4-drm soc:gpu: bound 3f902000.hdmi (ops vc4_hdmi_ops [vc4]) [7.632453] vc4-drm soc:gpu: bound 3f806000.vec (ops vc4_vec_ops [vc4])

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-22 Thread Daniel Vetter
On Wed, Nov 22, 2017 at 07:21:00PM +0100, Boris Brezillon wrote: > On Wed, 22 Nov 2017 19:13:09 +0100 > Daniel Vetter wrote: > > > On Wed, Nov 22, 2017 at 6:51 PM, Boris Brezillon > > wrote: > > > Hi Stefan, > > > > > > On Wed, 22 Nov 2017 17:43:35 +0100 (CET) > > > Stefan Wahren wrote: > > >

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-22 Thread Boris Brezillon
On Wed, 22 Nov 2017 19:13:09 +0100 Daniel Vetter wrote: > On Wed, Nov 22, 2017 at 6:51 PM, Boris Brezillon > wrote: > > Hi Stefan, > > > > On Wed, 22 Nov 2017 17:43:35 +0100 (CET) > > Stefan Wahren wrote: > > > >> Hi Boris, > >> if i boot Raspberry Pi 3 (ARM64, defconfig, linux-next-20171122)

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-22 Thread Daniel Vetter
On Wed, Nov 22, 2017 at 6:51 PM, Boris Brezillon wrote: > Hi Stefan, > > On Wed, 22 Nov 2017 17:43:35 +0100 (CET) > Stefan Wahren wrote: > >> Hi Boris, >> if i boot Raspberry Pi 3 (ARM64, defconfig, linux-next-20171122) with >> sufficient CMA memory (32 MB), i'll get this warning during boot: >>

Re: [BUG] drm: vc4: refcount_t: increment on 0; use-after-free.

2017-11-22 Thread Boris Brezillon
Hi Stefan, On Wed, 22 Nov 2017 17:43:35 +0100 (CET) Stefan Wahren wrote: > Hi Boris, > if i boot Raspberry Pi 3 (ARM64, defconfig, linux-next-20171122) with > sufficient CMA memory (32 MB), i'll get this warning during boot: > > [7.623510] vc4-drm soc:gpu: bound 3f902000.hdmi (ops vc4_hdmi