Author: dumbbell
Date: Sun Aug 25 14:56:14 2013
New Revision: 254867
URL: http://svnweb.freebsd.org/changeset/base/254867

Log:
  drm/ttm: Import Linux commit 014b34409fb2015f63663b6cafdf557fdf289628
  
  Author: Dave Airlie <airl...@gmail.com>
  Date:   Wed Jan 16 15:58:34 2013 +1000
  
      ttm: on move memory failure don't leave a node dangling
  
      if we have a move notify callback, when moving fails, we call move notify
      the opposite way around, however this ends up with *mem containing the 
mm_node
      from the bo, which means we double free it. This is a follow on to the 
previous
      fix.
  
      Reviewed-by: Jerome Glisse <jgli...@redhat.com>
      Signed-off-by: Dave Airlie <airl...@redhat.com>
  
  Approved by:  kib@

Modified:
  head/sys/dev/drm2/ttm/ttm_bo.c

Modified: head/sys/dev/drm2/ttm/ttm_bo.c
==============================================================================
--- head/sys/dev/drm2/ttm/ttm_bo.c      Sun Aug 25 14:55:08 2013        
(r254866)
+++ head/sys/dev/drm2/ttm/ttm_bo.c      Sun Aug 25 14:56:14 2013        
(r254867)
@@ -475,6 +475,7 @@ static int ttm_bo_handle_move_mem(struct
                        bo->mem = tmp_mem;
                        bdev->driver->move_notify(bo, mem);
                        bo->mem = *mem;
+                       *mem = tmp_mem;
                }
 
                goto out_err;
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to