]> www.infradead.org Git - users/jedix/linux-maple.git/commit
drm/ttm: unbind ttm before destroying node in accel move cleanup
authorBen Skeggs <bskeggs@redhat.com>
Mon, 22 Aug 2011 03:15:04 +0000 (03:15 +0000)
committerMaxim Uvarov <maxim.uvarov@oracle.com>
Thu, 8 Dec 2011 19:17:05 +0000 (11:17 -0800)
commit4c41dee9cb78ed845e93071fc6704d8c1efb2073
tree783513d5df77d422d515091ef7dc9148bd4ad194
parent723f14a258ba3330524d92674db031514f78ec98
drm/ttm: unbind ttm before destroying node in accel move cleanup

commit eac2095398668f989a3dd8d00be1b87850d78c01 upstream.

Nouveau makes the assumption that if a TTM is bound there will be a mm_node
around for it and the backwards ordering here resulted in a use-after-free
on some eviction paths.

Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Cc: Josh Boyer <jwboyer@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/gpu/drm/ttm/ttm_bo_util.c