[RFC] deadlock in "drm/exynos: fix wrong pointer access at vm close"

Al Viro viro at ZenIV.linux.org.uk
Sun Sep 22 14:29:11 PDT 2013


	You have drm_dev->struct_mutex grabbed before ->mmap_sem in
exynos_drm_gem_mmap_ioctl() and after - in exynos_drm_gem_fault()
(since ->fault() is always called with ->mmap_sem held).  Looks like
a garden-variety AB-BA deadlock...

	Incidentally, what should happen if another process shares the
same opened file (e.g. inherited over fork()) and does mmap() just
as we have ->f_op switched?


More information about the dri-devel mailing list