Pan Bian 41d931459b drm/i915/gvt: fix dropping obj reference twice ... The reference count of obj will be decremented twice if error occurs in dma_buf_fd(). Additionally, attempting to read the reference count of obj after dropping reference may lead to a use after free bug. Here, we drop obj's reference until it is not used. Fixes: e546e281d3 ("drm/i915/gvt: Dmabuf support for GVT-g") Signed-off-by: Pan Bian <bianpan2016@163.com> Reviewed-by: Zhenyu Wang <zhenyuw@linux.intel.com> Signed-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>		2019-11-08 11:04:07 +08:00
..
aperture_gm.c	drm/i915: Track ggtt fence reservations under its own mutex	2019-08-22 08:53:40 +01:00
cfg_space.c
cmd_parser.c	Merge drm/drm-next into drm-intel-next-queued	2019-08-22 00:10:36 -07:00
cmd_parser.h
debug.h
debugfs.c	drm/i915/gvt: no need to check return value of debugfs_create functions	2019-08-13 17:55:06 +08:00
display.c	Merge tag 'drm-intel-next-2019-04-17' of git://anongit.freedesktop.org/drm/drm-intel into drm-next	2019-04-24 10:02:20 +10:00
display.h
dmabuf.c	drm/i915/gvt: fix dropping obj reference twice	2019-11-08 11:04:07 +08:00
dmabuf.h
edid.c
edid.h
execlist.c	drm/i915: Move intel_engine_mask_t around for use by i915_request_types.h	2019-04-02 15:09:08 +01:00
execlist.h	drm/i915: Move intel_engine_mask_t around for use by i915_request_types.h	2019-04-02 15:09:08 +01:00
fb_decoder.c	drm/i915/gvt: Don't use ggtt_validdate_range() with size=0	2019-07-30 14:29:48 +08:00
fb_decoder.h
firmware.c	drm/i915: Remove I915_READ_NOTRACE	2019-06-12 15:33:13 +01:00
gtt.c	drm/i915/gvt: Warning for invalid ggtt access	2019-07-30 14:29:48 +08:00
gtt.h	drm/i915: Drop extern qualifiers from header function prototypes	2019-07-12 13:04:54 +01:00
gvt.c	drm/i915/gvt: no need to check return value of debugfs_create functions	2019-08-13 17:55:06 +08:00
gvt.h	drm/i915/gvt: factor out tlb and mocs register offset table	2019-08-13 17:55:06 +08:00
handlers.c	drm/i915/gvt: ignore unexpected pvinfo write	2019-06-17 15:45:41 +08:00
hypercall.h
interrupt.c	drm/i915/gvt: Fix typo of VBLANK_TIMER_PERIOD	2019-08-13 17:54:41 +08:00
interrupt.h
kvmgt.c	Merge drm/drm-next into drm-intel-next-queued	2019-08-22 00:10:36 -07:00
Makefile	drm: prefix header search paths with $(srctree)/	2019-04-26 17:03:23 +02:00
mmio_context.c	drm/i915/gvt: factor out tlb and mocs register offset table	2019-08-13 17:55:06 +08:00
mmio_context.h
mmio.c	drm/i915/gvt: remove the unused sreg	2019-03-11 11:32:07 +08:00
mmio.h
mpt.h
opregion.c	drm/i915: move modesetting core code under display/	2019-06-17 11:48:32 +03:00
page_track.c
page_track.h
reg.h	drm/i915/gvt: save RING_HEAD into vreg when vgpu switched out	2019-06-03 13:18:36 +08:00
sched_policy.c	drm/i915: update rpm_get/put to use the rpm structure	2019-06-14 15:58:33 +01:00
sched_policy.h
scheduler.c	drm main pull for 5.4-rc1	2019-09-19 16:24:24 -07:00
scheduler.h	drm/i915/gvt: save RING_HEAD into vreg when vgpu switched out	2019-06-03 13:18:36 +08:00
trace_points.c	drm/i915/gvt: remove duplicate include of trace.h	2019-07-30 14:26:30 +08:00
trace.h
vgpu.c	drm/i915/gvt: no need to check return value of debugfs_create functions	2019-08-13 17:55:06 +08:00