Re: [PATCH AUTOSEL 5.4 003/205] drm/v3d: don't leak bin job if v3d_job_init fails.
On Thu, 2020-01-23 at 09:17 -0500, Sasha Levin wrote: > On Fri, Jan 17, 2020 at 08:25:30AM +0100, Iago Toral wrote: > > Hi Sasha, > > > > > > please notice that there were two separate patches that addressed > > the > > same issue and applying both simultaneously leads to a double free > > (which is what I see is happening with this patch: see the second > > call > > to kfree(bin) right below the one added here). This issue was > > raised > > previously here: > > > > https://lists.freedesktop.org/archives/dri-devel/2019-October/241425.html > > I'll drop this patch for now. Any idea why upstream didn't pick up > the > fix yet? I see the problem still exists there. +Daniel I am not sure, when this issue was found Daniel added a few people on CC as heads-up, but maybe nobody actually got to fix the merge conflict in the end? Iago ___ dri-devel mailing list dri-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/dri-devel
Re: [PATCH AUTOSEL 5.4 003/205] drm/v3d: don't leak bin job if v3d_job_init fails.
On Fri, Jan 17, 2020 at 08:25:30AM +0100, Iago Toral wrote: Hi Sasha, please notice that there were two separate patches that addressed the same issue and applying both simultaneously leads to a double free (which is what I see is happening with this patch: see the second call to kfree(bin) right below the one added here). This issue was raised previously here: https://lists.freedesktop.org/archives/dri-devel/2019-October/241425.html I'll drop this patch for now. Any idea why upstream didn't pick up the fix yet? I see the problem still exists there. -- Thanks, Sasha ___ dri-devel mailing list dri-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/dri-devel
Re: [PATCH AUTOSEL 5.4 003/205] drm/v3d: don't leak bin job if v3d_job_init fails.
Hi Sasha, please notice that there were two separate patches that addressed the same issue and applying both simultaneously leads to a double free (which is what I see is happening with this patch: see the second call to kfree(bin) right below the one added here). This issue was raised previously here: https://lists.freedesktop.org/archives/dri-devel/2019-October/241425.html Iago On Thu, 2020-01-16 at 11:39 -0500, Sasha Levin wrote: > From: Iago Toral Quiroga > > [ Upstream commit 0d352a3a8a1f26168d09f7073e61bb4b328e3bb9 ] > > If the initialization of the job fails we need to kfree() it > before returning. > > Signed-off-by: Iago Toral Quiroga > Signed-off-by: Eric Anholt > Link: > https://patchwork.freedesktop.org/patch/msgid/20190916071125.5255-1-ito...@igalia.com > Fixes: a783a09ee76d ("drm/v3d: Refactor job management.") > Reviewed-by: Eric Anholt > Signed-off-by: Sasha Levin > --- > drivers/gpu/drm/v3d/v3d_gem.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/drivers/gpu/drm/v3d/v3d_gem.c > b/drivers/gpu/drm/v3d/v3d_gem.c > index 19c092d75266..6316bf3646af 100644 > --- a/drivers/gpu/drm/v3d/v3d_gem.c > +++ b/drivers/gpu/drm/v3d/v3d_gem.c > @@ -565,6 +565,7 @@ v3d_submit_cl_ioctl(struct drm_device *dev, void > *data, > ret = v3d_job_init(v3d, file_priv, &bin->base, > v3d_job_free, args->in_sync_bcl); > if (ret) { > + kfree(bin); > v3d_job_put(&render->base); > kfree(bin); > return ret; ___ dri-devel mailing list dri-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/dri-devel