Re: [PATCH 3/8] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

2025-06-02 Thread Simona Vetter
On Sun, Jun 01, 2025 at 03:06:15PM +0100, Adrián Larumbe wrote: > Hi Simona, > > On 28.05.2025 11:13, Simona Vetter wrote: > > The object is potentially already gone after the drm_gem_object_put(). > > In general the object should be fully constructed before calling > > drm_gem_handle_create(), ex

Re: [PATCH 3/8] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

2025-06-01 Thread Adrián Larumbe
Hi Simona, On 28.05.2025 11:13, Simona Vetter wrote: > The object is potentially already gone after the drm_gem_object_put(). > In general the object should be fully constructed before calling > drm_gem_handle_create(), except the debugfs tracking uses a separate > lock and list and separate flag

Re: [PATCH 3/8] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

2025-05-29 Thread kernel test robot
https://lore.kernel.org/r/20250528091307.1894940-4-simona.vetter%40ffwll.ch patch subject: [PATCH 3/8] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code config: sparc-randconfig-r132-20250529 (https://download.01.org/0day-ci/archive/20250529/202505292016.42gsda4w-...@intel.com/config

[PATCH 3/8] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

2025-05-28 Thread Simona Vetter
The object is potentially already gone after the drm_gem_object_put(). In general the object should be fully constructed before calling drm_gem_handle_create(), except the debugfs tracking uses a separate lock and list and separate flag to denotate whether the object is actually initilized. Since