[Nouveau] [PATCH] drm/nouveau/mmu: Fix an UAF issue in NVKM

2023-05-04 Thread korantwork
From: Xinghui Li In nvkm_mem_new_host, the mem is be alloced. And mem->memory is assigned to pmemory. During this process, the mem will be free if the error occurs. But the *pmemory still points to the >memory which has been relased.Laterly, the nvkm_memory_unref will put the memory which points

Re: [Nouveau] [PATCH] drm/nouveau/mmu: Fix an UAF issue in NVKM

2023-05-04 Thread Xinghui Li
hi all friendly ping... 于2023年1月12日周四 15:18写道: > > From: Xinghui Li > > In nvkm_mem_new_host, the mem is be alloced. And mem->memory is > assigned to pmemory. During this process, the mem will be free if > the error occurs. But the *pmemory still points to the >memory > which has been