sna: Don't reuse partial vmapped bo

A fun use after free.

Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>

1 files changed, 1 insertions, 1 deletions

diff --git a/src/sna/kgem.c b/src/sna/kgem.c
index abf7e82a..e6df36f5 100644
--- a/src/sna/kgem.c
+++ b/src/sna/kgem.c
@@ -766,7 +766,7 @@ static void kgem_finish_partials(struct kgem *kgem)
 		}
 
 		/* transfer the handle to a minimum bo */
-		if (bo->base.refcnt == 1) {
+		if (bo->base.refcnt == 1 && !bo->base.sync) {
 			struct kgem_bo *base = malloc(sizeof(*base));
 			if (base) {
 				memcpy(base, &bo->base, sizeof (*base));