Bug 104161 - refcount_t: increment on 0; use-after-free.
Summary: refcount_t: increment on 0; use-after-free.
Status: RESOLVED FIXED
Alias: None
Product: xorg
Classification: Unclassified
Component: Driver/nouveau (show other bugs)
Version: git
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Nouveau Project
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-12-07 11:03 UTC by S. Gilles
Modified: 2017-12-07 11:49 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments
dmesg including trace(s) (35.52 KB, text/plain)
2017-12-07 11:03 UTC, S. Gilles
no flags Details

Description S. Gilles 2017-12-07 11:03:59 UTC
Created attachment 136033 [details]
dmesg including trace(s)

I'm using current (within 24 hours) versions of libdrm, mesa, and the mainline kernel, with xf86-video-nouveau-1.0.15. This shows up early in dmesg. The driver appears usable afterwards.
Comment 1 Pierre Moreau 2017-12-07 11:32:52 UTC
I believe this should be fixed by https://github.com/skeggsb/nouveau/commit/9068f1df2394f0e4ab2b2a28cac06b462fe0a0aa. Could you please try applying it on your kernel (note this is an out-of-tree module, so you’ll need to prefix all the paths with “drivers/gpu/” when applying to the mainline tree) and confirm that it resolves the issue for you?
Comment 2 S. Gilles 2017-12-07 11:48:14 UTC
I can confirm that the issue is resolved. Thanks for the quick reply, and my apologies for the noise.
Comment 3 Pierre Moreau 2017-12-07 11:49:59 UTC
No worries! Thanks for testing the graphics stack and reporting the bug, as well as for quickly testing the fix.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.