Commit 51fdbeb4 authored by Thomas Hellstrom's avatar Thomas Hellstrom

drm/vmwgfx: Fix an uninitialized fence handle value

if vmw_execbuf_fence_commands() fails, The handle value will be
uninitialized and a bogus fence handle might be copied to user-space.

Cc: <stable@vger.kernel.org>
Fixes: 2724b2d5: ("drm/vmwgfx: Use new validation interface for the modesetting code v2")
Reported-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarThomas Hellstrom <thellstrom@vmware.com>
Reviewed-by: Brian Paul <brianp@vmware.com> #v1
Reviewed-by: Sinclair Yeh <syeh@vmware.com> #v1
Reviewed-by: default avatarDeepak Rawat <drawat@vmware.com>
parent 728354c0
...@@ -2554,8 +2554,8 @@ void vmw_kms_helper_validation_finish(struct vmw_private *dev_priv, ...@@ -2554,8 +2554,8 @@ void vmw_kms_helper_validation_finish(struct vmw_private *dev_priv,
user_fence_rep) user_fence_rep)
{ {
struct vmw_fence_obj *fence = NULL; struct vmw_fence_obj *fence = NULL;
uint32_t handle; uint32_t handle = 0;
int ret; int ret = 0;
if (file_priv || user_fence_rep || vmw_validation_has_bos(ctx) || if (file_priv || user_fence_rep || vmw_validation_has_bos(ctx) ||
out_fence) out_fence)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment