On Thu, Apr 23, 2015 at 03:07:55PM +0100, Peter Antoine wrote:
This patch fixes an unsafe deference in the DRM_IOCTL_NEW_CTX. If the ioctl is called before the lock is created or after it has been destroyed. The code will deference a NULL pointer. This ioctl is a root ioctl so exploitation is limited.
You've turned an application crash into an application crash... Just with a slightly less verbose kernel log. -Chris