1. 09 4月, 2013 1 次提交
  2. 02 2月, 2013 1 次提交
  3. 01 2月, 2013 6 次提交
  4. 24 1月, 2013 1 次提交
    • I
      drm/radeon: fix a rare case of double kfree · 1da80cfa
      Ilija Hadzic 提交于
      If one (but not both) allocations of p->chunks[].kpage[]
      in radeon_cs_parser_init fail, the error path will free
      the successfully allocated page, but leave a stale pointer
      value in the kpage[] field. This will later cause a
      double-free when radeon_cs_parser_fini is called.
      This patch fixes the issue by forcing both pointers to NULL
      after kfree in the error path.
      
      The circumstances under which the problem happens are very
      rare. The card must be AGP and the system must run out of
      kmalloc area just at the right time so that one allocation
      succeeds, while the other fails.
      Signed-off-by: NIlija Hadzic <ihadzic@research.bell-labs.com>
      Cc: Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>
      Signed-off-by: NAlex Deucher <alexander.deucher@amd.com>
      Cc: stable@vger.kernel.org
      1da80cfa
  5. 11 1月, 2013 2 次提交
  6. 14 12月, 2012 2 次提交
  7. 16 10月, 2012 1 次提交
  8. 03 10月, 2012 1 次提交
  9. 21 9月, 2012 8 次提交
  10. 13 8月, 2012 1 次提交
  11. 18 7月, 2012 1 次提交
  12. 17 7月, 2012 2 次提交
  13. 21 6月, 2012 2 次提交
  14. 02 6月, 2012 1 次提交
  15. 29 5月, 2012 1 次提交
  16. 10 5月, 2012 5 次提交
  17. 03 5月, 2012 3 次提交
  18. 12 4月, 2012 1 次提交