Re: [PATCH] drm: fix the usage after free

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Sorry, no I am not a developer working on libdrm, this is my first contribution to it in fact. How would I go about adding my Signed-Off?

On Mon, 24 Aug 2015 at 09:59 Zhou, Jammy <Jammy.Zhou@xxxxxxx> wrote:
> Would be more convenient if Mathias would add his Signed-off-by as well and send out the patch, cause he is the original author.

Agreed. Just was not quite sure if Mathias is working on the libdrm project directly or not based on the comments in the bugzilla "hopefully the fix can be pushed to master soon".

Regards,
Jammy

-----Original Message-----
From: Christian König [mailto:deathsimple@xxxxxxxxxxx]
Sent: Monday, August 24, 2015 3:52 PM
To: Zhou, Jammy; dri-devel@xxxxxxxxxxxxxxxxxxxxx; master.homer@xxxxxxxxx
Subject: Re: [PATCH] drm: fix the usage after free

On 24.08.2015 05:56, Jammy Zhou wrote:
> From: Mathias Tillman <master.homer@xxxxxxxxx>
>
> For readdir_r(), the next directory entry is returned in
> caller-allocted buffer (pointered by pent here).
>
> https://bugs.freedesktop.org/show_bug.cgi?id=91704
>
> Signed-off-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

Would be more convenient if Mathias would add his Signed-off-by as well and send out the patch, cause he is the original author.

Anyway the patch is clearly a nice catch and Reviewed-by: Christian König <christian.koenig@xxxxxxx>

Regards,
Christian.

> ---
>   xf86drm.c | 5 +++--
>   1 file changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/xf86drm.c b/xf86drm.c
> index 5e02969..a7cc643 100644
> --- a/xf86drm.c
> +++ b/xf86drm.c
> @@ -2803,11 +2803,12 @@ static char *drmGetMinorNameForFD(int fd, int
> type)
>
>       while (readdir_r(sysdir, pent, &ent) == 0 && ent != NULL) {
>               if (strncmp(ent->d_name, name, len) == 0) {
> +                     snprintf(dev_name, sizeof(dev_name), DRM_DIR_NAME "/%s",
> +                              ent->d_name);
> +
>                       free(pent);
>                       closedir(sysdir);
>
> -                     snprintf(dev_name, sizeof(dev_name), DRM_DIR_NAME "/%s",
> -                              ent->d_name);
>                       return strdup(dev_name);
>               }
>       }

_______________________________________________
dri-devel mailing list
dri-devel@xxxxxxxxxxxxxxxxxxxxx
http://lists.freedesktop.org/mailman/listinfo/dri-devel

[Index of Archives]     [Linux DRI Users]     [Linux Intel Graphics]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [XFree86]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Linux Kernel]     [Linux SCSI]     [XFree86]
  Powered by Linux