mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-09 05:39:54 -04:00
Merge "msm: kgsl: Correct the refcount on current process PID"
This commit is contained in:
commit
d42c44476e
1 changed files with 9 additions and 2 deletions
|
|
@ -890,17 +890,24 @@ static struct kgsl_process_private *kgsl_process_private_new(
|
|||
list_for_each_entry(private, &kgsl_driver.process_list, list) {
|
||||
if (private->pid == cur_pid) {
|
||||
if (!kgsl_process_private_get(private)) {
|
||||
put_pid(cur_pid);
|
||||
private = ERR_PTR(-EINVAL);
|
||||
}
|
||||
/*
|
||||
* We need to hold only one reference to the PID for
|
||||
* each process struct to avoid overflowing the
|
||||
* reference counter which can lead to use-after-free.
|
||||
*/
|
||||
put_pid(cur_pid);
|
||||
return private;
|
||||
}
|
||||
}
|
||||
|
||||
/* Create a new object */
|
||||
private = kzalloc(sizeof(struct kgsl_process_private), GFP_KERNEL);
|
||||
if (private == NULL)
|
||||
if (private == NULL) {
|
||||
put_pid(cur_pid);
|
||||
return ERR_PTR(-ENOMEM);
|
||||
}
|
||||
|
||||
kref_init(&private->refcount);
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue