[Bug 101534] [HSW] NULL pointer dereference in intel_fbdev_invalidate

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=101534

Chris Wilson <chris at chris-wilson.co.uk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #7 from Chris Wilson <chris at chris-wilson.co.uk> ---
commit 15727ed0d944ce1dec8b9e1082dd3df29a0fdf44
Author: Chris Wilson <chris at chris-wilson.co.uk>
Date:   Thu Jun 22 17:02:11 2017 +0100

    drm/i915/fbdev: Check for existence of ifbdev->vma before operations

    Commit fabef825626d ("drm/i915: Drop struct_mutex around frontbuffer
    flushes") adds a dependency to ifbdev->vma when flushing the framebufer,
    but the checks are only against the existence of the ifbdev->fb and not
    against ifbdev->vma. This leaves a window of opportunity where we may
    try to operate on the fbdev prior to it being probed (thanks to
    asynchronous booting).

    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=101534
    Fixes: fabef825626d ("drm/i915: Drop struct_mutex around frontbuffer
flushes")
    Signed-off-by: Chris Wilson <chris at chris-wilson.co.uk>
    Cc: Joonas Lahtinen <joonas.lahtinen at linux.intel.com>
    Cc: Daniel Vetter <daniel.vetter at intel.com>
    Link:
http://patchwork.freedesktop.org/patch/msgid/20170622160211.783-1-chris@chris-wilson.co.uk
    Reviewed-by: Tvrtko Ursulin <tvrtko.ursulin at intel.com>
    Cc: stable at vger.kernel.org

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20170704/b278d048/attachment.html>