[PW_SID:957928] iommu/riscv: fix use after free of riscv_iommu_domain#350
[PW_SID:957928] iommu/riscv: fix use after free of riscv_iommu_domain#350linux-riscv-bot wants to merge 2 commits into
Conversation
The function vfio_group_detach_container begins by calling vfio_iommu_type1_detach_group, which may subsequently calls riscv_iommu_free_paging_domain to release the riscv_iommu_domain. Then, iommu_group_release_dma_owner is triggered, which results in the execution of riscv_iommu_attach_paging_domain and riscv_iommu_bond_unlink(info->domain). However, the info->domain had been freed beforehand but was not set to NULL, leading to errors. This commit resolves the issue by setting info->domain to NULL within riscv_iommu_bond_unlink, a function that is called by riscv_iommu_attach_blocking_domain before the domain was freed. Signed-off-by: BillXiang <xiangwencheng@lanxincomputing.com> Signed-off-by: Linux RISC-V bot <linux.riscv.bot@gmail.com>
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
|
Patch 1: "iommu/riscv: fix use after free of riscv_iommu_domain" |
linux-riscv-bot
force-pushed
the
workflow__riscv__fixes
branch
2 times, most recently
from
4d9ad71 to
625be03
Compare
1 participant
PR for series 957928 applied to workflow__riscv__fixes
Name: iommu/riscv: fix use after free of riscv_iommu_domain
URL: https://patchwork.kernel.org/project/linux-riscv/list/?series=957928
Version: 1