From nobody Mon Oct 6 06:31:23 2025 Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D393423315A for ; Wed, 23 Jul 2025 20:28:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=205.220.168.131 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1753302515; cv=none; b=ClDZ899q3uEKgrynWhRUF4g9FkFoUyhXMUeLEVuJTYnNxQs8gqJrC23KPsxA9t7RdDA5+UJG+zsKan5nq9MfYbseEJcFRdvY8aR233VC2H69fr2gsnbb7IYP3AnZEixJXAhnnY1cEFI7eGq04mUA96THGpTnBtVwMldI/PQcADs= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1753302515; c=relaxed/simple; bh=ni68krQ1ZwrRugsj/OAoNsJ3wM0hzLC+Yz9N/TufK5I=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=PUeY9CANiNXXLgpgZIUJ/C0zYADQLyJ/FwGGo6XnNgORM6aSkn3lJWh+c+EYQ/SuOfVfIT98JM5J0aYXuvlBTPF6fJVPSXAI8vidq9qvkv6+fzce56CiWs1vW0LzOTnRHMxgJaiox/Ec8QBavUgZ3mEDsb1/9zL8GmBm+WFxsNE= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com; spf=pass smtp.mailfrom=oss.qualcomm.com; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b=TOIBXAyu; arc=none smtp.client-ip=205.220.168.131 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b="TOIBXAyu" Received: from pps.filterd (m0279863.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 56NH2bQp025711 for ; Wed, 23 Jul 2025 20:28:33 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= cc:content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=go4w6pisezM +fmrLJT459t96/m/WbzFkmudzTaE8Fpo=; b=TOIBXAyunTGCoyU9O0+JrziAopK PRYLvkqmUc4pYsmtcy8e9DIZzT2sFMbuODU/dH6qrA8bArv2OaLkBwrp6CbT2s4O ZDF1kSUtaKWmpXXPANSLKjJ4aBWWuE+1z0y2ChxaawQa0D+Q8a+4o7Mfjz+j4oHo VGI7CJ2BFfEyMbhoecKf4EyFA2xx8yocvBB9H7GdUKNuT81cTfKkeqbeJd5G5lKA KSdGYL8eFSSbTX5Vua7p05Btr8nXas9/aoCseiWKxpY0IVCILrx/a4lMpQRiv3j7 H6DFxFoKfCN193E8Istnf5Tun0tSFeKGc3P8HGFiVfRiKiI3ajsKjywRFVQ== Received: from mail-pg1-f198.google.com (mail-pg1-f198.google.com [209.85.215.198]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 482b1ud1x5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for ; Wed, 23 Jul 2025 20:28:32 +0000 (GMT) Received: by mail-pg1-f198.google.com with SMTP id 41be03b00d2f7-b31f112c90aso231453a12.0 for ; Wed, 23 Jul 2025 13:28:32 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1753302512; x=1753907312; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=go4w6pisezM+fmrLJT459t96/m/WbzFkmudzTaE8Fpo=; b=SYAxIbl3XODvKUMk6cEoBjcZdlqK/R5VZNv+WzXquwtGCvwbN7ySpzCc+c6kyEGLbW U/3MJvnYv8ZER4NCFqI6SnMN8z+F5rqc+ZGFu47txep6UiQn/OsMqBqWeFd/oBv9w0+G 4H//jtwJRIsZ3XbPcPDa/j5yEFo4iBdKx+0VYOOEu+2umYo4n1ckQz+oPR7PwxXll3Fo hDnCIB3rrbRypgaoHCAmHgh51u8OGlTNp7eVokqnlBxtsg2Pekl8t40tMXnuKKbYPDJK pejoehc+1n3gmmpA1Dx3Hmbz4nniV43mtksn1Be3o6hyTrr76y15Yubc7fsth7oLSBDk 296A== X-Forwarded-Encrypted: i=1; AJvYcCU63StxCCH479m9TMrfw0i+9g+HKDx42htEQQDu8hARiJue68AEBHNMa/P0j8gugyZolLKGwoJlrAE/2dM=@vger.kernel.org X-Gm-Message-State: AOJu0YzODHfdRQCGXfw6fgMq28EOCAmarwFRmq/Vx6Ll6Xwa11pOcPnl GJ4ifuzZCYREQWFtwErj2KJVQWAYNcVlQ9Zv4ZlPen8UGPMio2qkx+6A0QLGLwOFuPnExeyTzUN /9NyYHr05wHErPJObEwxFNkQW+mitN2pO3qF70HEVzTUv46Wq5x+4xGwVvQn71yLJwqA= X-Gm-Gg: ASbGncuI5PfYqBRUNO4vUz9bCk3KUB0w3Iyl1nZn08KEFXIlgxaVx87wE+5GF7W1vpf IRFxrDlwYqtWjBnAIZWd8gSkAAeqE4pNtK1Qq0UnvmTRueW6GZ0i5j82NlB8V1Krks/xMcsBSkF EnLGxbNPE+Nv2tv0vbmuyuq9SXQ/HhAY1Wd8jMFhe2QmiU2v/2GwRQ+KKnb6Gz5KFYg/fbVqHhX Ad4+Wr+BODhZjU+z/NPIzC/zGsPoyM48TnggRWFlYXZuElRI0mIz5rLj+1HQjS0Bk/riosYHDtY 7bXBLUQd1tXqdND5z1cB6bwx2qk7y2JCC0hOl/6rLbd7o0sOXyI= X-Received: by 2002:a05:6a21:6d99:b0:23d:34f2:3a22 with SMTP id adf61e73a8af0-23d48db2762mr6286117637.7.1753302511937; Wed, 23 Jul 2025 13:28:31 -0700 (PDT) X-Google-Smtp-Source: AGHT+IG8VTSyv68wujrKZl+LBtm1rzipjAkQC2pZQlbR1Bf3Ipp3TNep0+rs/9z89WCJhtGvp+l5RQ== X-Received: by 2002:a05:6a21:6d99:b0:23d:34f2:3a22 with SMTP id adf61e73a8af0-23d48db2762mr6286089637.7.1753302511486; Wed, 23 Jul 2025 13:28:31 -0700 (PDT) Received: from localhost ([2601:1c0:5000:d5c:5b3e:de60:4fda:e7b1]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-761b05e4029sm21283b3a.97.2025.07.23.13.28.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 23 Jul 2025 13:28:31 -0700 (PDT) From: Rob Clark To: dri-devel@lists.freedesktop.org Cc: linux-arm-msm@vger.kernel.org, freedreno@lists.freedesktop.org, Dan Carpenter , Rob Clark , Dmitry Baryshkov , Abhinav Kumar , Jessica Zhang , Sean Paul , Marijn Suijten , David Airlie , Simona Vetter , linux-kernel@vger.kernel.org (open list) Subject: [PATCH 1/2] drm/msm: Defer fd_install in SUBMIT ioctl Date: Wed, 23 Jul 2025 13:28:22 -0700 Message-ID: <20250723202825.18902-2-robin.clark@oss.qualcomm.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20250723202825.18902-1-robin.clark@oss.qualcomm.com> References: <20250723202825.18902-1-robin.clark@oss.qualcomm.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Authority-Analysis: v=2.4 cv=LdY86ifi c=1 sm=1 tr=0 ts=688145f0 cx=c_pps a=Qgeoaf8Lrialg5Z894R3/Q==:117 a=xqWC_Br6kY4A:10 a=Wb1JkmetP80A:10 a=KKAkSRfTAAAA:8 a=EUspDBNiAAAA:8 a=p_L9ESIXKxyW_a9_XK8A:9 a=x9snwWr2DeNwDh03kgHS:22 a=cvBusfyB2V15izCimMoJ:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNzIzMDE3NCBTYWx0ZWRfX5B5tEGBpl8zr SJs+a+hiX6Cz+VLZ+klb/aMav8F036gCjktIfwXQmu3XWzAkzjB7j0PkyvDlk3ZceGk4Cc2VFwk OJWcL811YPo9NbqhK9LOWTd0/+7wFACERIudCa7E2ypSce0elxIgtMkh3zPKX/z6Z/B/Eq1/0jl OdToo2pt+TEIHHjL37ixCo1jcw8ha/ETQoLbEKAbzFfjDdZTo+oQMy/UxVwqfLCoxJ0b8iRvar6 lC/uYH16DVR1OqFbGlckW5BUpnUOWu8IvQqO63A6zXg3RGpWZNEwA5rcdoMf2++BUI3sS1RCtxn YLHXz+vXjHLLntVXH7aCjLpwt0lr05CkiG3jwEGsMC1PkewVT4IoC4zIyQODfnDW36UowZN9Typ jqHRO9mxHEbIWNpBYA/2yaWf1DTQjcS20OBoGw/czbenOiCOtC4SJkYSsV/dve+/b5I6ZmZ3 X-Proofpoint-ORIG-GUID: 3_le9MR6la1ZsovHHxO8AlINj5s_QRMu X-Proofpoint-GUID: 3_le9MR6la1ZsovHHxO8AlINj5s_QRMu X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-07-23_03,2025-07-23_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 impostorscore=0 mlxscore=0 priorityscore=1501 adultscore=0 phishscore=0 malwarescore=0 lowpriorityscore=0 mlxlogscore=999 bulkscore=0 spamscore=0 suspectscore=0 clxscore=1015 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2507230174 Content-Type: text/plain; charset="utf-8" Avoid fd_install() until there are no more potential error paths, to avoid put_unused_fd() after the fd is made visible to userspace. Fixes: 68dc6c2d5eec ("drm/msm: Fix submit error-path leaks") Reported-by: Dan Carpenter Signed-off-by: Rob Clark --- drivers/gpu/drm/msm/msm_gem_submit.c | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/drivers/gpu/drm/msm/msm_gem_submit.c b/drivers/gpu/drm/msm/msm= _gem_submit.c index 0ac4c199ec93..bfea19baf6d9 100644 --- a/drivers/gpu/drm/msm/msm_gem_submit.c +++ b/drivers/gpu/drm/msm/msm_gem_submit.c @@ -770,12 +770,8 @@ int msm_ioctl_gem_submit(struct drm_device *dev, void = *data, =20 if (ret =3D=3D 0 && args->flags & MSM_SUBMIT_FENCE_FD_OUT) { sync_file =3D sync_file_create(submit->user_fence); - if (!sync_file) { + if (!sync_file) ret =3D -ENOMEM; - } else { - fd_install(out_fence_fd, sync_file->file); - args->fence_fd =3D out_fence_fd; - } } =20 if (ret) @@ -813,10 +809,14 @@ int msm_ioctl_gem_submit(struct drm_device *dev, void= *data, out_unlock: mutex_unlock(&queue->lock); out_post_unlock: - if (ret && (out_fence_fd >=3D 0)) { - put_unused_fd(out_fence_fd); + if (ret) { + if (out_fence_fd >=3D 0) + put_unused_fd(out_fence_fd); if (sync_file) fput(sync_file->file); + } else if (sync_file) { + fd_install(out_fence_fd, sync_file->file); + args->fence_fd =3D out_fence_fd; } =20 if (!IS_ERR_OR_NULL(submit)) { --=20 2.50.1 From nobody Mon Oct 6 06:31:23 2025 Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 5A879235047 for ; Wed, 23 Jul 2025 20:28:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=205.220.168.131 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1753302517; cv=none; b=QBmfBcqR54ozTl+BPOY8E/dEjQY0v/FD7mRX+2/JYUWfNcBcuj1FK5rV6Cz5AXCCtD3coq+60uTWEwcgLTVrxQdCj7pFKXGoWqTZBd2R4K2RYzVbANSwDGdKqCI5NRLZAQwwODB6/qNZzd5lc9EQP6YEBMkMYDGxb41p9tneWQI= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1753302517; c=relaxed/simple; bh=FX/3ZHFv7wjTbrH58bvhZjQXOS7g8qWalhEsIqd3tM0=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=nabd83qgexFBkOKRbO632HcpY6ETCzMUuHz6gJaDa9aTetnLSTMeGQ/kHhlZmb57MgEJq7RY2Q9lYOIOeIouo0BEB4sYdOHDZnMT4HCuI9o/yu59lfKJI4bteIOzbCWY/Rh/BnmTDK2f60UnRd4wT9MMISiJytW6evfHWIc/sBk= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com; spf=pass smtp.mailfrom=oss.qualcomm.com; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b=b4pcGcy2; arc=none smtp.client-ip=205.220.168.131 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b="b4pcGcy2" Received: from pps.filterd (m0279865.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 56NGNeX4019543 for ; Wed, 23 Jul 2025 20:28:34 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= cc:content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=Jg8G8kDUfiO 0QN87d8Nmg8E9KepNpwzJOvRP22Q1Yow=; b=b4pcGcy2lrUKAQy2I10T3RvGn2b t+63HpxKZk9yhrSZUeuy2/3TlSqrKg2F+1OnALf1oGJQITkXVbZqIHDxbPCwySwv UmDVq7/oRsg08WoBQe80b18z2Jr/jVYvcgFVPnQeAGhljqhUK/B1eIsO/FKAfWvA 0mYzny++ay/+Npx4rD0mGYKnlXoBJym3CYwlRgzXuhcWmxSU+pqlggkzM+k5bd3U AVxtjyZ4eyzypCIivqoymC51gqJc98wv0UZrnV2EekeDlRxA1nNdxIysNB6yf7RD JypbIqfiJajwQRnbQ4DnRP9ZekRrrm8Cvgha9DdMKH6REYNVOhH10ZjZ6yg== Received: from mail-pj1-f71.google.com (mail-pj1-f71.google.com [209.85.216.71]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 483379rkr6-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for ; Wed, 23 Jul 2025 20:28:34 +0000 (GMT) Received: by mail-pj1-f71.google.com with SMTP id 98e67ed59e1d1-313d6d671ffso227970a91.2 for ; Wed, 23 Jul 2025 13:28:34 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1753302514; x=1753907314; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Jg8G8kDUfiO0QN87d8Nmg8E9KepNpwzJOvRP22Q1Yow=; b=i3xUPgnGYYibrDTSkbs25GGA0BbfkbVf+WZLRTVpVv25FEGaEdLf6UCfIfHzKBX+zH OhG7wGqMb56iw6z9j5sggyskY/zd+5l2gCpStyWK8A3YcYDuQh95Xxq/+LskhZGYeZtg EAp+yx34mfe7pHuLElJ4TaEVNIVLqlqLY9uC6xkeheX1ZscTPSfNbPL2XIS78RAUAoQ/ aW+lfa+3dubM7qgMAK3oINJt946IKUvwDWVxwrNzepqiI7nhv5/7QAWuekRmi0EA4ZfO d1hoVmWNwKg0xVPPAqmWFjZNSdEHDPWI2OJOkkIpj1lDxLIKw7xsKVLtK8VFNVJxV7YZ Dkdg== X-Forwarded-Encrypted: i=1; AJvYcCUt5ole29Z8HnfKtfkw/BAGVe3gzS7YgiDeWj80sfbeAFszjGgkpOXABycQjSMta7CQBx1VjTNMldpK9ws=@vger.kernel.org X-Gm-Message-State: AOJu0Yyf3QjkI0mRcxLOLaqkcnwR96OocyIz2FRj8IHraon/StYB/zZj AgCejxlZpPfx6KSXci7e7Oampc8nHTZB51GSCq0yilb7V3nN/jyl93DOxpP9Yhlq14TJZy7q9b7 iw5EYFdk+6kAUH1GnTuygJj4qqnD2a3gBo9g6IqX04+I4Ffp6k4V6OcLILAftSZMtb+M= X-Gm-Gg: ASbGnctcc0P0U6k6IWCPRi20ytnOPuZOVY96FWP632/cpjRALpwGj3CXYlPoBlJPI6K HcAQbaVxIewUKUZYtzgQZXsb/1hAR84tgts+btwG43FHD/jN2hYai7BGp75eRk4sH6SFHioVHqz DGfVpb9mnXO8ukYj8xo6pUnZQAzWByRY1mkzAS0h7PiMaojHCitj2GNUpnGcdKZ+14S4rV+QUTT WDlufkk5r/jafSSKqXB64H0Xn2o/v6Qd9wcYKR+7TiNIZJG5B3JVcQeI0pKQs/A37hLxQD/awPO +lso4RlbM6O2Trmps/b7I7VAGghNBhCgqmIxHc//0LENVeHzCUE= X-Received: by 2002:a17:90b:35c7:b0:312:e6f1:c05d with SMTP id 98e67ed59e1d1-31e5073f550mr6078154a91.2.1753302513786; Wed, 23 Jul 2025 13:28:33 -0700 (PDT) X-Google-Smtp-Source: AGHT+IGK5Ovk21o1hIxl/7WYP8zrKYd43nYxItlCMNkL0IAMZTWY2Xcbzi2QZeu1m8gPG607xMRIxg== X-Received: by 2002:a17:90b:35c7:b0:312:e6f1:c05d with SMTP id 98e67ed59e1d1-31e5073f550mr6078124a91.2.1753302513335; Wed, 23 Jul 2025 13:28:33 -0700 (PDT) Received: from localhost ([2601:1c0:5000:d5c:5b3e:de60:4fda:e7b1]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-31e6249fe9esm80462a91.23.2025.07.23.13.28.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 23 Jul 2025 13:28:32 -0700 (PDT) From: Rob Clark To: dri-devel@lists.freedesktop.org Cc: linux-arm-msm@vger.kernel.org, freedreno@lists.freedesktop.org, Dan Carpenter , Rob Clark , Dmitry Baryshkov , Abhinav Kumar , Jessica Zhang , Sean Paul , Marijn Suijten , David Airlie , Simona Vetter , linux-kernel@vger.kernel.org (open list) Subject: [PATCH 2/2] drm/msm: Defer fd_install in VM_BIND ioctl Date: Wed, 23 Jul 2025 13:28:23 -0700 Message-ID: <20250723202825.18902-3-robin.clark@oss.qualcomm.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20250723202825.18902-1-robin.clark@oss.qualcomm.com> References: <20250723202825.18902-1-robin.clark@oss.qualcomm.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Proofpoint-GUID: KTT_v_naZuD-vE8Fy_AI3wOE46B6c5Ou X-Authority-Analysis: v=2.4 cv=btxMBFai c=1 sm=1 tr=0 ts=688145f2 cx=c_pps a=UNFcQwm+pnOIJct1K4W+Mw==:117 a=xqWC_Br6kY4A:10 a=Wb1JkmetP80A:10 a=EUspDBNiAAAA:8 a=p_L9ESIXKxyW_a9_XK8A:9 a=uKXjsCUrEbL0IQVhDsJ9:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNzIzMDE3NCBTYWx0ZWRfX1UQn5mmC5s9a Kzx6GTz4s5BGq7Uwu+jLl4JETrU9v7Tovg5PpzglSgHHip2THlOO5e4Ck6QTx1ykpxojYY5YYNN ba74sQlq5Aie9cZRjKhASsabMCTShBZkuQGtvvEziyiOU2RO+6p7lDQ5gzFswq1dKNG2XHnsDK/ PtX4dG4nD9KlYlWeekvQGacKIjtyGMwlpMQYjSz0fkijfuMSuxPgNp43qxwblzpAlNgl5jtc4IK lxlqzqJKvDmAH6SWGJhDDOd7Qmh2YakyHSz4LgHpmHIhV04RdLdQjmz9AOzz7wP0AtrU0sAO5iB n2sHuaFIKmIkJZGFs8A1k61iD8BeEdIxDu/RNb66K/RjmnrG52ks76AMCPo2AjVMr6klq6gQyRH oU9hTWDmO57JfpMXznQCvbD2W5O3QCp0fUWCeTWpB1X31Sg814XRRUOurSXKNj04OrRCq9fy X-Proofpoint-ORIG-GUID: KTT_v_naZuD-vE8Fy_AI3wOE46B6c5Ou X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-07-23_03,2025-07-23_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 malwarescore=0 mlxlogscore=999 impostorscore=0 mlxscore=0 clxscore=1015 adultscore=0 priorityscore=1501 phishscore=0 suspectscore=0 lowpriorityscore=0 spamscore=0 bulkscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2507230174 Content-Type: text/plain; charset="utf-8" Avoid fd_install() until there are no more potential error paths, to avoid put_unused_fd() after the fd is made visible to userspace. Fixes: 03b6becb03c8 ("Merge tag 'drm-msm-next-2025-07-05' into HEAD") Signed-off-by: Rob Clark --- drivers/gpu/drm/msm/msm_gem_vma.c | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/drivers/gpu/drm/msm/msm_gem_vma.c b/drivers/gpu/drm/msm/msm_ge= m_vma.c index e5162db436a6..d4b1cfb3aa03 100644 --- a/drivers/gpu/drm/msm/msm_gem_vma.c +++ b/drivers/gpu/drm/msm/msm_gem_vma.c @@ -1473,12 +1473,8 @@ msm_ioctl_vm_bind(struct drm_device *dev, void *data= , struct drm_file *file) =20 if (args->flags & MSM_VM_BIND_FENCE_FD_OUT) { sync_file =3D sync_file_create(job->fence); - if (!sync_file) { + if (!sync_file) ret =3D -ENOMEM; - } else { - fd_install(out_fence_fd, sync_file->file); - args->fence_fd =3D out_fence_fd; - } } =20 if (ret) @@ -1507,10 +1503,14 @@ msm_ioctl_vm_bind(struct drm_device *dev, void *dat= a, struct drm_file *file) out_unlock: mutex_unlock(&queue->lock); out_post_unlock: - if (ret && (out_fence_fd >=3D 0)) { - put_unused_fd(out_fence_fd); + if (ret) { + if (out_fence_fd >=3D 0) + put_unused_fd(out_fence_fd); if (sync_file) fput(sync_file->file); + } else if (sync_file) { + fd_install(out_fence_fd, sync_file->file); + args->fence_fd =3D out_fence_fd; } =20 if (!IS_ERR_OR_NULL(job)) { --=20 2.50.1