[PATCH 1/2] drm/ttm: unbind ttm before destroying node in accel move cleanup

2011-08-23 Thread Jerome Glisse
On Sun, Aug 21, 2011 at 11:15 PM, wrote: > From: Ben Skeggs > > Nouveau makes the assumption that if a TTM is bound there will be a mm_node > around for it and the backwards ordering here resulted in a use-after-free > on some eviction paths. > > Signed-off-by: Ben Skeggs Reviewed-by: Jerome Gl

Re: [PATCH 1/2] drm/ttm: unbind ttm before destroying node in accel move cleanup

2011-08-23 Thread Jerome Glisse
On Sun, Aug 21, 2011 at 11:15 PM, wrote: > From: Ben Skeggs > > Nouveau makes the assumption that if a TTM is bound there will be a mm_node > around for it and the backwards ordering here resulted in a use-after-free > on some eviction paths. > > Signed-off-by: Ben Skeggs Reviewed-by: Jerome Gl

[PATCH 1/2] drm/ttm: unbind ttm before destroying node in accel move cleanup

2011-08-22 Thread skeg...@gmail.com
From: Ben Skeggs Nouveau makes the assumption that if a TTM is bound there will be a mm_node around for it and the backwards ordering here resulted in a use-after-free on some eviction paths. Signed-off-by: Ben Skeggs --- drivers/gpu/drm/ttm/ttm_bo_util.c |2 +- 1 files changed, 1 insertio

[PATCH 1/2] drm/ttm: unbind ttm before destroying node in accel move cleanup

2011-08-21 Thread skeggsb
From: Ben Skeggs Nouveau makes the assumption that if a TTM is bound there will be a mm_node around for it and the backwards ordering here resulted in a use-after-free on some eviction paths. Signed-off-by: Ben Skeggs --- drivers/gpu/drm/ttm/ttm_bo_util.c |2 +- 1 files changed, 1 insertio