Displaying 3 results from an estimated 3 matches for "nvkm_vmm_node_merge".
2022 Oct 29
3
[PATCH] drm/nouveau/mmu: fix use-after-free bug in nvkm_vmm_pfn_map
If it failed in kzalloc, vma will be freed in nvkm_vmm_node_merge.
The later use of vma will casue use after free.
Reported-by: Zheng Wang <hackerzheng666 at gmail.com>
Reported-by: Zhuorao Yang <alex000young at gmail.com>
Fix it by returning to upper caller as soon as error occurs.
Signed-off-by: Zheng Wang <zyytlz.wz at 163.com>
---
driver...
2023 Mar 07
0
[PATCH] drm/nouveau/mmu: fix use-after-free bug in nvkm_vmm_pfn_map
Reviewed-by: Lyude Paul <lyude at redhat.com>
Will push upstream in a moment
On Sat, 2022-10-29 at 15:46 +0800, Zheng Wang wrote:
> If it failed in kzalloc, vma will be freed in nvkm_vmm_node_merge.
> The later use of vma will casue use after free.
>
> Reported-by: Zheng Wang <hackerzheng666 at gmail.com>
> Reported-by: Zhuorao Yang <alex000young at gmail.com>
>
> Fix it by returning to upper caller as soon as error occurs.
>
> Signed-off-by: Zheng Wang...
2023 Mar 07
1
[PATCH] drm/nouveau/mmu: fix use-after-free bug in nvkm_vmm_pfn_map
Actually - could you resend this with dri-devel at lists.freedesktop.org added to
the cc list just to make patchwork happy?
On Sat, 2022-10-29 at 15:46 +0800, Zheng Wang wrote:
> If it failed in kzalloc, vma will be freed in nvkm_vmm_node_merge.
> The later use of vma will casue use after free.
>
> Reported-by: Zheng Wang <hackerzheng666 at gmail.com>
> Reported-by: Zhuorao Yang <alex000young at gmail.com>
>
> Fix it by returning to upper caller as soon as error occurs.
>
> Signed-off-by: Zheng Wang...