]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/nouveau: remove fence wait code from deferred client work handler
authorBen Skeggs <bskeggs@redhat.com>
Tue, 8 May 2018 10:39:47 +0000 (20:39 +1000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 3 Aug 2018 05:47:48 +0000 (07:47 +0200)
commit125efb51cdd9c7e8649add5bc3866e3ed325ff76
tree92a253d8a8f8263f082df175df742d8e6bd27e61
parent52e3ca2ed5cf9ddfbbfbb776d2e3f66736b374e9
drm/nouveau: remove fence wait code from deferred client work handler

[ Upstream commit 11e451e74050d9e9030581ce40337838acfcea5b ]

Fences attached to deferred client work items now originate from channels
belonging to the client, meaning we can be certain they've been signalled
before we destroy a client.

This closes a race that could happen if the dma_fence_wait_timeout() call
didn't succeed.  When the fence was later signalled, a use-after-free was
possible.

Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/nouveau/nouveau_drm.c