| commit | 726e2766e04f31620d61cbb8bd9fbf7abe962d02 | [log] [tgz] |
|---|---|---|
| author | Ben Skeggs <bskeggs@redhat.com> | Mon Aug 22 03:15:04 2011 +0000 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Tue Oct 25 07:10:15 2011 +0200 |
| tree | 2eb4d451cec0837e096ec5ec2ce86b27a000d00f | |
| parent | 379791a66688385cf75c8aece1a81fc68f536cd4 [diff] |
drm/ttm: unbind ttm before destroying node in accel move cleanup commit eac2095398668f989a3dd8d00be1b87850d78c01 upstream. Nouveau makes the assumption that if a TTM is bound there will be a mm_node around for it and the backwards ordering here resulted in a use-after-free on some eviction paths. Signed-off-by: Ben Skeggs <bskeggs@redhat.com> Signed-off-by: Dave Airlie <airlied@redhat.com> Cc: Josh Boyer <jwboyer@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>