Commit a428f6d3 authored by Doug Horn's avatar Doug Horn Committed by Alistair Delva
Browse files

FROMGIT: drm/virtio: Fix use after free in get_capset_info callback. 



If a response to virtio_gpu_cmd_get_capset_info takes longer than
five seconds to return, the callback will access freed kernel memory
in vg->capsets.

Bug: 166299146
Signed-off-by: default avatarDoug Horn <doughorn@google.com>
Signed-off-by: default avatarGerd Hoffmann <kraxel@redhat.com>
(cherry picked from commit e219688f git://anongit.freedesktop.org/drm/drm-misc tags/drm-misc-next-2020-09-10)
Change-Id: Ia180aa88bb43010dfe3963da27d675355a51f785
parent 4eaae9ae
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment