Re: [PATCH] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

On 10/07/2025 09:53, Simona Vetter wrote: > On Wed, Jul 09, 2025 at 04:48:21PM +0100, Steven Price wrote: >> On 09/07/2025 14:52, Simona Vetter wrote: >>> The object is potentially already gone after the drm_gem_object_put(). >>> In general the object should be fully constructed before calling >>>

Re: [PATCH] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

On Wed, Jul 09, 2025 at 04:48:21PM +0100, Steven Price wrote: > On 09/07/2025 14:52, Simona Vetter wrote: > > The object is potentially already gone after the drm_gem_object_put(). > > In general the object should be fully constructed before calling > > drm_gem_handle_create(), except the debugfs t

Re: [PATCH] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

On 09/07/2025 14:52, Simona Vetter wrote: > The object is potentially already gone after the drm_gem_object_put(). > In general the object should be fully constructed before calling > drm_gem_handle_create(), except the debugfs tracking uses a separate > lock and list and separate flag to denotate

[PATCH] drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code

The object is potentially already gone after the drm_gem_object_put(). In general the object should be fully constructed before calling drm_gem_handle_create(), except the debugfs tracking uses a separate lock and list and separate flag to denotate whether the object is actually initilized. Since