| commit | ff085d014ed8ccce230769575e50924561218d98 | [log] [tgz] |
|---|---|---|
| author | Ilia Mirkin <imirkin@alum.mit.edu> | Tue Feb 16 01:02:52 2016 -0500 |
| committer | Ilia Mirkin <imirkin@alum.mit.edu> | Sun Mar 06 10:14:52 2016 -0500 |
| tree | 7fdd01cb02166d39a69a82a2d3867bfb20abe152 | |
| parent | fa43c4bd998990f8d3ebf7db33213b4935ef2b8f [diff] |
nvc0: reset TFB bufctx when we no longer hold a reference to the buffers This fixes some use-after-free situations in dEQP when an xfb state is removed, and then a clear is triggered, which only does a partial validation. It would attempt to read the no-longer-valid buffers, resulting in crashes. Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu> Cc: "11.1 11.2" <mesa-stable@lists.freedesktop.org>