forked from luck/tmp_suning_uos_patched
daa72300c9
[ Upstream commit 2b1fe162e584a88ec7f12a651a2a50f94dd8cfac ] vfio_add_group_dev() must be called only after all of the private data in vdev is fully setup and ready, otherwise there could be races with user space instantiating a device file descriptor and starting to call ops. For instance vfio_fsl_mc_reflck_attach() sets vdev->reflck and vfio_fsl_mc_open(), called by fops open, unconditionally derefs it, which will crash if things get out of order. This driver started life with the right sequence, but two commits added stuff after vfio_add_group_dev(). Fixes: |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
vfio_fsl_mc_intr.c | ||
vfio_fsl_mc_private.h | ||
vfio_fsl_mc.c |