git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7c4c396) | patch
drm/ttm: unbind ttm before destroying node in accel move cleanup
authorBen Skeggs <bskeggs@redhat.com>
Mon, 22 Aug 2011 03:15:04 +0000 (03:15 +0000)
committerDave Airlie <airlied@redhat.com>
Tue, 23 Aug 2011 08:35:16 +0000 (09:35 +0100)
commiteac2095398668f989a3dd8d00be1b87850d78c01
tree46fb51fd804c47feaac6a9e1862a36b43984f254tree | snapshot
parent7c4c3960dff109bc5db4c35da481c212dadb5eb5commit | diff
drm/ttm: unbind ttm before destroying node in accel move cleanup

Nouveau makes the assumption that if a TTM is bound there will be a mm_node
around for it and the backwards ordering here resulted in a use-after-free
on some eviction paths.

Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/ttm/ttm_bo_util.c diff | blob | history
Pandora Kernel Repository