7fdf478a43
virtio_gpu_get_caps_ioctl could return success with invalid data if a second caller to the function occurred after the entry was created in virtio_gpu_cmd_get_capset but prior to the virtio_gpu_cmd_capset_cb callback being called. This could leak contents of memory as well since the caps_cache allocation is done without zeroing. Signed-off-by: David Riley <davidriley@chromium.org> Link: http://patchwork.freedesktop.org/patch/msgid/20190605234423.11348-1-davidriley@chromium.org Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
virtgpu_debugfs.c | ||
virtgpu_display.c | ||
virtgpu_drv.c | ||
virtgpu_drv.h | ||
virtgpu_fb.c | ||
virtgpu_fence.c | ||
virtgpu_gem.c | ||
virtgpu_ioctl.c | ||
virtgpu_kms.c | ||
virtgpu_object.c | ||
virtgpu_plane.c | ||
virtgpu_prime.c | ||
virtgpu_trace_points.c | ||
virtgpu_trace.h | ||
virtgpu_ttm.c | ||
virtgpu_vq.c |