Pavel Skripkin b9770b0b6e udmabuf: fix general protection fault in udmabuf_create ...

Syzbot reported general protection fault in udmabuf_create. The problem
was in wrong error handling.

In commit 16c243e99d ("udmabuf: Add support for mapping hugepages (v4)")
shmem_read_mapping_page() call was replaced with find_get_page_flags(),
but find_get_page_flags() returns NULL on failure instead PTR_ERR().

Wrong error checking was causing GPF in get_page(), since passed page
was equal to NULL. Fix it by changing if (IS_ER(!hpage)) to if (!hpage)

Reported-by: syzbot+e9cd3122a37c5d6c51e8@syzkaller.appspotmail.com
Fixes: 16c243e99d ("udmabuf: Add support for mapping hugepages (v4)")
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Link: http://patchwork.freedesktop.org/patch/msgid/20210811175052.21254-1-paskripkin@gmail.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>

2021-08-12 09:27:22 +02:00

..

heaps

Merge tag 'drm-misc-next-2021-03-03' of git://anongit.freedesktop.org/drm/drm-misc into drm-next

2021-03-16 17:08:46 +10:00

dma-buf-sysfs-stats.c

dma-buf: Delete the DMA-BUF attachment sysfs statistics

2021-07-20 11:06:59 +02:00

dma-buf-sysfs-stats.h

dma-buf: Delete the DMA-BUF attachment sysfs statistics

2021-07-20 11:06:59 +02:00

dma-buf.c

dma_buf: remove dmabuf sysfs teardown before release

2021-07-20 12:59:55 +02:00

dma-fence-array.c

dma-fence: Propagate errors to dma-fence-array container

2019-08-12 08:25:52 +01:00

dma-fence-chain.c

dma-buf: some dma_fence_chain improvements

2021-06-14 19:33:16 +02:00

dma-fence.c

drm/syncobj: use newly allocated stub fences

2021-04-08 12:21:13 +02:00

dma-heap.c

dma-buf: dma-heap: Provide accessor to get heap name

2021-02-25 18:28:24 +05:30

dma-resv.c

dma-buf: fix dma_resv_test_signaled test_all handling v2

2021-07-08 14:59:08 +02:00

Kconfig

dmabuf: Add the capability to expose DMA-BUF stats in sysfs

2021-06-15 11:50:24 +02:00

Makefile

dmabuf: Add the capability to expose DMA-BUF stats in sysfs

2021-06-15 11:50:24 +02:00

selftest.c

dma-buf: Introduce selftesting framework

2019-08-19 18:01:34 +01:00

selftest.h

dma-buf: Introduce selftesting framework

2019-08-19 18:01:34 +01:00

selftests.h

Merge drm/drm-next into drm-intel-next-queued

2020-06-25 18:05:03 +03:00

seqno-fence.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174

2019-05-30 11:26:41 -07:00

st-dma-fence-chain.c

dma-buf: add dma_fence_chain_alloc/free v3

2021-06-14 19:38:34 +02:00

st-dma-fence.c

dma-buf: Avoid comma separated statements

2021-02-09 17:14:11 +01:00

sw_sync.c

compat_ioctl: move more drivers to compat_ptr_ioctl

2019-10-23 17:23:44 +02:00

sync_debug.c

Merge v5.2-rc5 into drm-next

2019-06-19 12:07:29 +02:00

sync_debug.h

dma-buf: Remove unused sync_dump()

2019-04-23 09:30:07 +01:00

sync_file.c

dma-buf/sync_file: Don't leak fences on merge failure

2021-07-12 13:34:49 +02:00

sync_trace.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udmabuf.c

udmabuf: fix general protection fault in udmabuf_create

2021-08-12 09:27:22 +02:00