Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f6dfe73a authored by Thomas Hellstrom's avatar Thomas Hellstrom
Browse files

drm/vmwgfx: Tighten the security around buffer maps 



Make sure only buffer objects that are referenced by the client can be mapped.

Signed-off-by: default avatarThomas Hellstrom <thellstrom@vmware.com>
Reviewed-by: default avatarBrian Paul <brianp@vmware.com>
parent 0d3215e3

drivers/gpu/drm/vmwgfx/vmwgfx_resource.c

+7 −2
Original line number Diff line number Diff line
@@ -538,8 +538,13 @@ int vmw_user_dmabuf_verify_access(struct ttm_buffer_object *bo, 
		return -EPERM;



	vmw_user_bo = vmw_user_dma_buffer(bo);

	return (vmw_user_bo->prime.base.tfile == tfile ||

		vmw_user_bo->prime.base.shareable) ? 0 : -EPERM;



	/* Check that the caller has opened the object. */

	if (likely(ttm_ref_object_exists(tfile, &vmw_user_bo->prime.base)))

		return 0;



	DRM_ERROR("Could not grant buffer access.\n");

	return -EPERM;

}



/**