[Intel-gfx] [PATCH] [v2] drm/i915/vma: Correct use after free in eviction

Chris Wilson chris at chris-wilson.co.uk
Sat Aug 17 00:31:12 CEST 2013


On Fri, Aug 16, 2013 at 01:29:33PM -0700, Ben Widawsky wrote:
> The vma will [possibly] be destroyed during unbind in eviction.
> Immediately after this, we try to delete the list entry.
> 
> Chris and Ville did the debug on this before I woke up, I just get to
> take credit for the fix :p
> 
> v2: Missed the drm_object_unreference use after free (Ville)
> 
> Reported-by: Mika Kuoppala <mika.kuoppala at intel.com>
> Cc: Ville Syrjälä <ville.syrjala at linux.intel.com>
> Cc: Chris Wilson <chris at chris-wilson.co.uk>
> Signed-off-by: Ben Widawsky <ben at bwidawsk.net>

Should have spotted this earlier :(

Can I have a couple more lines of whitespace?
Reviewed-by: Chris Wilson <chris at chris-wilson.co.uk>
-Chris

-- 
Chris Wilson, Intel Open Source Technology Centre



More information about the Intel-gfx mailing list