drm/i915: Reset vma->mm_list after unbinding
authorChris Wilson <chris@chris-wilson.co.uk>
Tue, 25 Feb 2014 14:23:28 +0000 (14:23 +0000)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Wed, 5 Mar 2014 20:30:23 +0000 (21:30 +0100)
commit64bf930379ac8097705db7d40602c2aa9ec0d2f4
tree4c4e2159e9b24b0c65b17cacd5a1be6ecdbea340
parent6fe7286530d9b9ce13421e3628bf564e896662a6
drm/i915: Reset vma->mm_list after unbinding

In place of true activity counting, we walk the list of vma associated
with an object managing each on the vm's active/inactive list everytime
we call move-to-inactive. This depends upon the vma->mm_list being
cleared after unbinding, or else we run into difficulty when tracking
the object in multiple vm's - we see a use-after free and corruption of
the mm_list.

Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
Cc: Ben Widawsky <ben@bwidawsk.net>
Reviewed-by: Ben Widawsky <ben@bwidawsk.net>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
drivers/gpu/drm/i915/i915_gem.c