github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-20 19:01:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
185a4caeec
linux/drivers/gpu/drm/i915/gem
History
Joonas Lahtinen eed3de2acf
drm/i915/gem: Do not leak siblings[] on proto context error 
After a successful BALANCE/PARALLEL_SUBMIT extension on context
creation, error during processing of next user extension leaks
the siblings[] array. Fix that.

Discovered using AI-assisted static analysis confirmed by
Intel Product Security.

Reported-by: Martin Hodo <martin.hodo@intel.com>
Fixes: d4433c7600 ("drm/i915/gem: Use the proto-context to handle create parameters (v5)")
Cc: Faith Ekstrand <faith.ekstrand@collabora.com>
Cc: Simona Vetter <simona.vetter@ffwll.ch>
Cc: Tvrtko Ursulin <tvrtko.ursulin@igalia.com>
Cc: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Cc: <stable@vger.kernel.org> # v5.15+
Signed-off-by: Joonas Lahtinen <joonas.lahtinen@linux.intel.com>
Reviewed-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Signed-off-by: Tvrtko Ursulin <tursulin@ursulin.net>
Link: https://lore.kernel.org/r/20260701073030.44850-1-joonas.lahtinen@linux.intel.com
(cherry picked from commit aa65e0a4b5)
Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>
2026-07-06 10:26:13 -04:00
..
selftests drm/i915/selftests: Run vma tests only if current->mm is present 2026-05-19 13:29:27 +02:00
i915_gem_busy.c drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_clflush.c drm/i915/gem: unify i915 gem object frontbuffer function names 2026-03-11 11:32:10 +02:00
i915_gem_clflush.h drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_context_types.h Merge tag 'drm-intel-gt-next-2025-05-08-1' of https://gitlab.freedesktop.org/drm/i915/kernel into drm-next 2025-05-09 11:39:27 +10:00
i915_gem_context.c drm/i915/gem: Do not leak siblings[] on proto context error 2026-07-06 10:26:13 -04:00
i915_gem_context.h drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_create.c Convert more 'alloc_obj' cases to default GFP_KERNEL arguments 2026-02-21 20:03:00 -08:00
i915_gem_create.h
i915_gem_dmabuf.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
i915_gem_dmabuf.h
i915_gem_domain.c drm/i915/gem: unify i915 gem object frontbuffer function names 2026-03-11 11:32:10 +02:00
i915_gem_domain.h
i915_gem_execbuffer.c Revert "i915: don't use a vma that didn't match the context VM" 2026-05-20 10:46:41 +03:00
i915_gem_internal.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
i915_gem_internal.h
i915_gem_ioctls.h drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_lmem.c drm/i915: Extract intel_memory_type_is_local() 2025-04-02 02:15:26 +03:00
i915_gem_lmem.h drm/i915: Remove deadcode 2024-12-30 01:31:31 +01:00
i915_gem_mman.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
i915_gem_mman.h drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_object_frontbuffer.c drm/{i915, xe}/frontbuffer: move frontbuffer handling to parent interface 2026-03-11 11:32:10 +02:00
i915_gem_object_frontbuffer.h drm/{i915, xe}/frontbuffer: move frontbuffer handling to parent interface 2026-03-11 11:32:10 +02:00
i915_gem_object_types.h drm-misc-next for 6.19: 2025-12-26 18:15:33 +10:00
i915_gem_object.c Merge tag 'drm-intel-next-2026-03-16' of https://gitlab.freedesktop.org/drm/i915/kernel into drm-next 2026-03-17 15:44:26 +10:00
i915_gem_object.h drm/i915/gem: add i915_gem_fence_wait_priority_display() helper 2025-09-25 11:41:59 +03:00
i915_gem_pages.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
i915_gem_phys.c drm/i915/gem: Fix phys BO pread/pwrite with offset 2026-06-10 09:23:22 +01:00
i915_gem_pm.c drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_pm.h drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_region.c drm/i915/gem: fix typos in i915/gem files 2025-01-23 05:48:23 -05:00
i915_gem_region.h
i915_gem_shmem.c folio_batch: rename pagevec.h to folio_batch.h 2026-04-05 13:53:07 -07:00
i915_gem_shrinker.c drm: include drm_print.h where needed 2025-10-31 10:34:52 +02:00
i915_gem_shrinker.h
i915_gem_stolen.c drm/i915/pci: move intel_pci_config.h under include/drm/intel 2026-04-08 12:29:59 +03:00
i915_gem_stolen.h drm/{i915, xe}/stolen: move stolen memory handling to display parent interface 2025-12-10 11:36:11 +02:00
i915_gem_throttle.c drm/i915/gem: Convert SPDX headers to single-line format 2025-03-31 14:18:13 +02:00
i915_gem_tiling.c drm/i915: include gen 2 in HAS_128_BYTE_Y_TILING() 2025-10-14 12:34:58 +03:00
i915_gem_tiling.h
i915_gem_ttm_move.c drm/i915: replace use of system_unbound_wq with system_dfl_wq 2026-03-05 13:58:22 -05:00
i915_gem_ttm_move.h
i915_gem_ttm_pm.c drm: include drm_print.h where needed 2025-10-31 10:34:52 +02:00
i915_gem_ttm_pm.h
i915_gem_ttm.c drm/i915: Fix potential UAF in TTM object purge 2026-05-26 09:31:40 +01:00
i915_gem_ttm.h
i915_gem_userptr.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
i915_gem_wait.c drm/i915/gem: add i915_gem_fence_wait_priority_display() helper 2025-09-25 11:41:59 +03:00