On Wed, Dec 04, 2013 at 02:52:06PM +0000, Chris Wilson wrote: > Inorder to serialise the closing of the file descriptor and its > subsequent release of client requests with i915_gem_free_request(), we > need to hold the struct_mutex in i915_gem_release(). Failing to do so > has the potential to trigger an OOPS, later with a use-after-free. > > Testcase: igt/gem_close_race > Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=70874 > Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71029 > Reported-by: Eric Anholt <eric@xxxxxxxxxx> > Signed-off-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> > Cc: stable@xxxxxxxxxxxxxxx Picked up for -fixes, thanks for the patch. -Daniel -- Daniel Vetter Software Engineer, Intel Corporation +41 (0) 79 365 57 48 - http://blog.ffwll.ch _______________________________________________ Intel-gfx mailing list Intel-gfx@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/intel-gfx
