[Intel-gfx] [PATCH] drm/i915: Reset vma->mm_list after unbinding

[Daniel Vetter]

On Wed, Mar 05, 2014 at 01:05:29PM +0000, Chris Wilson wrote:
> On Tue, Feb 25, 2014 at 03:38:18PM -0800, Ben Widawsky wrote:
> > On Tue, Feb 25, 2014 at 02:23:28PM +0000, Chris Wilson wrote:
> > > In place of true activity counting, we walk the list of vma associated
> > > with an object managing each on the vm's active/inactive list everytime
> > > we call move-to-inactive. This depends upon the vma->mm_list being
> > > cleared after unbinding, or else we run into difficulty when tracking
> > > the object in multiple vm's - we see a use-after free and corruption of
> > > the mm_list.
> > 
> > I feel bad because someone in PRC told me about this bug, and I could
> > have sword you had previously fixed it. So if you're reading this
> > whomever you were, my apoligies.
> > > 
> > > Signed-off-by: Chris Wilson <chris at chris-wilson.co.uk>
> > > Cc: Ben Widawsky <ben at bwidawsk.net>
> > 
> > I think Cc: stable too
> > 
> > Reviewed-by: Ben Widawsky <ben at bwidawsk.net>
> 
> Daniel?
Queued for -next, thanks for the patch.
-Daniel
-- 
Daniel Vetter
Software Engineer, Intel Corporation
+41 (0) 79 365 57 48 - http://blog.ffwll.ch