Pan Bian 41d931459b drm/i915/gvt: fix dropping obj reference twice ...

The reference count of obj will be decremented twice if error occurs
in dma_buf_fd(). Additionally, attempting to read the reference count of
obj after dropping reference may lead to a use after free bug. Here, we
drop obj's reference until it is not used.

Fixes: e546e281d3 ("drm/i915/gvt: Dmabuf support for GVT-g")
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Zhenyu Wang <zhenyuw@linux.intel.com>
Signed-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>

2019-11-08 11:04:07 +08:00

..

aperture_gm.c

drm/i915: Track ggtt fence reservations under its own mutex

2019-08-22 08:53:40 +01:00

cfg_space.c

…

cmd_parser.c

Merge drm/drm-next into drm-intel-next-queued

2019-08-22 00:10:36 -07:00

cmd_parser.h

…

debug.h

…

debugfs.c

drm/i915/gvt: no need to check return value of debugfs_create functions

2019-08-13 17:55:06 +08:00

display.c

…

display.h

…

dmabuf.c

drm/i915/gvt: fix dropping obj reference twice

2019-11-08 11:04:07 +08:00

dmabuf.h

…

edid.c

…

edid.h

…

execlist.c

…

execlist.h

…

fb_decoder.c

drm/i915/gvt: Don't use ggtt_validdate_range() with size=0

2019-07-30 14:29:48 +08:00

fb_decoder.h

…

firmware.c

…

gtt.c

drm/i915/gvt: Warning for invalid ggtt access

2019-07-30 14:29:48 +08:00

gtt.h

…

gvt.c

drm/i915/gvt: no need to check return value of debugfs_create functions

2019-08-13 17:55:06 +08:00

gvt.h

drm/i915/gvt: factor out tlb and mocs register offset table

2019-08-13 17:55:06 +08:00

handlers.c

…

hypercall.h

…

interrupt.c

drm/i915/gvt: Fix typo of VBLANK_TIMER_PERIOD

2019-08-13 17:54:41 +08:00

interrupt.h

…

kvmgt.c

Merge drm/drm-next into drm-intel-next-queued

2019-08-22 00:10:36 -07:00

Makefile

…

mmio_context.c

drm/i915/gvt: factor out tlb and mocs register offset table

2019-08-13 17:55:06 +08:00

mmio_context.h

…

mmio.c

…

mmio.h

…

mpt.h

…

opregion.c

…

page_track.c

…

page_track.h

…

reg.h

…

sched_policy.c

…

sched_policy.h

…

scheduler.c

Merge tag 'drm-next-2019-09-18' of git://anongit.freedesktop.org/drm/drm

2019-09-19 16:24:24 -07:00

scheduler.h

…

trace_points.c

drm/i915/gvt: remove duplicate include of trace.h

2019-07-30 14:26:30 +08:00

trace.h

…

vgpu.c

drm/i915/gvt: no need to check return value of debugfs_create functions

2019-08-13 17:55:06 +08:00