?????? [PATCH RFC v1]display: fix heap use after free in cursor_put

2024-04-10 Thread ?glym
Hi During the test with logging, I found that there may be a conflict between the logic of updating the refcount in vnc_dpy_cursor_define() and QXL_CURSOR_SET action,  same as dpy_cursor_define() after commit 385ac97f,  and the atomic operation needs to be ensured; The first thoughts are as

[PATCH RFC v1]display: fix heap use after free in cursor_put

2024-04-10 Thread ?glym
0001-display-fix-heap-use-after-free-in-cursor_put.patch Description: Binary data

Re: [PATCH RFC v1]display: fix heap use after free in cursor_put

2024-04-10 Thread Marc-André Lureau
Hi On Wed, Apr 10, 2024 at 2:06 PM ゞlym <707242...@qq.com> wrote: > > Please send the patch as inline: https://www.qemu.org/docs/master/devel/submitting-a-patch.html#do-not-send-as-an-attachment The patch is doing too much changes to the ssd.lock usage without explaining in detail which race and