samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Garpu 0
Kode Masalah Tarik Permintaan Actions Packages Projects Rilis Wiki Kegiatan

disp: msm: sde: increment refcount of dma_fence before access

Telusuri Sumber 
Add changes to increment refcount of dma_fence before accessing
the input_fence structure in plane_state through debug_fs node and
decrement once access is finished. This prevents the use after free
issues when accessed through debug_fs node.

Change-Id: I262336ce2b86a94d7662d834e8fd3509dadda1bd
Signed-off-by: Jayaprakash <jmadiset@codeaurora.org>
This commit is contained in:
Jayaprakash
2020-10-20 17:30:05 +05:30
orang tua a27dce97f8
melakukan 0a5fdc0fc3
1 mengubah file dengan 12 tambahan dan 4 penghapusan
Download Patch File Download Diff File Expand all files Collapse all files

16
msm/sde/sde_crtc.c
Melihat File

@@ -6151,10 +6151,18 @@ static int _sde_debugfs_fence_status_show(struct seq_file *s, void *data)
seq_printf(s, "plane:%u stage:%d\n", plane->base.id,
pstate->stage);
fence = pstate->input_fence;
SDE_EVT32(DRMID(crtc), fence);
if (fence)
sde_fence_list_dump(fence, &s);
SDE_EVT32(DRMID(crtc), plane->base.id, pstate->input_fence);
if (pstate->input_fence) {
rcu_read_lock();
fence = dma_fence_get_rcu(pstate->input_fence);
rcu_read_unlock();
if (fence) {
sde_fence_list_dump(fence, &s);
dma_fence_put(fence);
}
}
}
/* Dump release fence info */