shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 11:13:02 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
1fc83589418593fb235cb4e08b43c5be4b381b05
linux/drivers/gpu/drm
History
xinhui pan 0185a98b37 drm/amdgpu: Fix a use-after-free 
[ Upstream commit 1e5c373850 ]

looks like we forget to set ttm->sg to NULL.
Hit panic below

[ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI
[ 1235.989074] Call Trace:
[ 1235.991751]  sg_free_table+0x17/0x20
[ 1235.995667]  amdgpu_ttm_backend_unbind.cold+0x4d/0xf7 [amdgpu]
[ 1236.002288]  amdgpu_ttm_backend_destroy+0x29/0x130 [amdgpu]
[ 1236.008464]  ttm_tt_destroy+0x1e/0x30 [ttm]
[ 1236.013066]  ttm_bo_cleanup_memtype_use+0x51/0xa0 [ttm]
[ 1236.018783]  ttm_bo_release+0x262/0xa50 [ttm]
[ 1236.023547]  ttm_bo_put+0x82/0xd0 [ttm]
[ 1236.027766]  amdgpu_bo_unref+0x26/0x50 [amdgpu]
[ 1236.032809]  amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x7aa/0xd90 [amdgpu]
[ 1236.040400]  kfd_ioctl_alloc_memory_of_gpu+0xe2/0x330 [amdgpu]
[ 1236.046912]  kfd_ioctl+0x463/0x690 [amdgpu]

Signed-off-by: xinhui pan <xinhui.pan@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-16 11:10:51 +09:00
..
amd
drm/amdgpu: Fix a use-after-free
2023-05-16 11:10:51 +09:00
arc
drm/arcpgu: Accommodate adv7511 switch to DRM bridge
2016-11-11 04:31:35 +03:00
arm
drm/arm/hdlcd: Allow a bit of clock tolerance
2023-05-15 13:55:06 +09:00
armada
drm/armada: fix colorkey mode property
2023-05-12 17:06:42 +09:00
ast
drm/ast: Fix connector leak during driver unload
2023-05-15 10:39:25 +09:00
atmel-hlcdc
drm: atmel-hlcdc: enable clock before configuring timing engine
2023-05-15 16:56:51 +09:00
bochs
drm/bochs: downgrade pci_request_region failure from error to warning
2023-05-15 17:12:48 +09:00
bridge
drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings
2023-05-15 16:18:14 +09:00
cirrus
drm/drivers: add support for using the arch wc mapping API.
2016-10-26 16:48:01 +10:00
etnaviv
drm/etnaviv: replace MMU flush marker with flush sequence
2023-05-15 17:12:57 +09:00
exynos
drm/exynos: dsi: fix workaround for the legacy clock name
2023-05-15 17:10:40 +09:00
fsl-dcu
drm/fsl-dcu: enable IRQ before drm_atomic_helper_resume()
2017-12-09 22:01:46 +01:00
gma500
gma500: clean up error handling in init
2023-05-16 10:37:08 +09:00
hisilicon
drm/hisilicon: Ensure LDI regs are properly configured.
2017-12-05 11:24:35 +01:00
i2c
Revert "drm/i2c: tda998x: don't register the connector"
2016-09-23 03:29:50 -07:00
i810
drm/i810: Prevent underflow in ioctl
2023-05-15 16:15:25 +09:00
i915
drm/i915: Fix mismatch between misplaced vma check and vma insert
2023-05-16 10:26:04 +09:00
imx
drm/imx: imx-ldb: fix out of bounds array access warning
2023-05-16 10:52:17 +09:00
mediatek
drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail
2023-05-16 09:13:30 +09:00
mga
drm/mga: remove device_is_agp callback
2017-04-12 12:41:20 +02:00
mgag200
gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap
2017-11-21 09:23:26 +01:00
msm
drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
2023-05-16 10:54:24 +09:00
nouveau
drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
2023-05-16 10:32:34 +09:00
omapdrm
drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
2023-05-16 09:57:05 +09:00
panel
drm: panel: simple: Fix bpc for LG LB070WV8 panel
2023-05-16 08:46:36 +09:00
qxl
drm/qxl: Use correct notify port address when creating cursor ring
2023-05-16 08:20:20 +09:00
r128
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
radeon
drm/radeon: Fix off-by-one power_state index heap overwrite
2023-05-16 11:04:10 +09:00
rcar-du
drm: rcar-du: Handle event when disabling CRTCs
2018-03-22 09:17:47 +01:00
rockchip
drm/rockchip: Properly adjust to a true clock in adjusted_mode
2023-05-15 14:06:14 +09:00
savage
drm/savage: dereferencing an error pointer
2017-01-19 20:17:58 +01:00
shmobile
drm/shmobile: make fbdev support really optional
2016-07-18 09:11:37 +02:00
sis
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
sti
drm/sti: do not remove the drm_bridge that was never added
2023-05-15 16:42:33 +09:00
sun4i
drm/sun4i: Set device driver data at bind time for use in unbind
2023-05-15 12:50:00 +09:00
tdfx
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
tegra
drm/tegra: sor: Disable clocks on error in tegra_sor_init()
2023-05-16 09:56:18 +09:00
tilcdc
drm/tilcdc: fix leak & null ref in panel_connector_get_modes
2023-05-16 08:45:48 +09:00
ttm
Merge 4.9.89 into android-4.9
2018-03-22 09:54:47 +01:00
udl
udl-kms: fix crash due to uninitialized memory
2023-05-12 17:16:09 +09:00
vc4
drm/vc4: Fix compilation error reported by kbuild test bot
2023-05-15 12:35:27 +09:00
vgem
drm: Don't swallow error codes in drm_dev_alloc()
2016-09-22 04:03:48 -07:00
via
mm: replace get_user_pages() write/force parameters with gup_flags
2016-10-19 08:11:43 -07:00
virtio
Fix use after free in get_capset_info callback.
2023-05-16 09:40:10 +09:00
vmwgfx
drm/vmwgfx: Fix two list_for_each loop exit tests
2023-05-16 08:48:33 +09:00
ati_pcigart.c
…
drm_agpsupport.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_atomic_helper.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_atomic.c
drm/atomic: Handling the case when setting old crtc for plane
2023-05-12 16:43:21 +09:00
drm_auth.c
drm: set is_master to 0 upon drm_new_set_master() failure
2023-05-15 10:05:54 +09:00
drm_blend.c
drm/doc: Polish plane composition property docs
2016-09-22 00:04:02 -07:00
drm_bridge.c
drm: Extract drm_bridge.h
2016-09-19 15:04:15 +02:00
drm_bufs.c
drm/bufs: Fix Spectre v1 vulnerability
2023-05-15 11:22:08 +09:00
drm_cache.c
drm: Restore double clflush on the last partial cacheline
2016-07-12 15:57:13 +02:00
drm_color_mgmt.c
drm/doc: Document color space handling
2016-09-22 00:04:03 -07:00
drm_connector.c
drm: Add Content Protection property
2018-07-05 05:19:57 -07:00
drm_context.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_crtc_helper_internal.h
drm/fb-helper: Fix sparse warnings
2016-09-19 16:45:15 +02:00
drm_crtc_helper.c
drm/kms-helpers: Extract drm_modeset_helper.[hc]
2016-08-16 16:10:19 +02:00
drm_crtc_internal.h
drm: Extract drm_mode_config.[hc]
2018-08-14 19:40:39 -07:00
drm_crtc.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_debugfs.c
drm/debugfs: fix plain echo to connector "force" attribute
2023-05-16 08:45:58 +09:00
drm_dma.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_dp_aux_dev.c
drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor()
2023-05-16 09:59:28 +09:00
drm_dp_dual_mode_helper.c
drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state
2018-04-29 11:31:56 +02:00
drm_dp_helper.c
drm/psr: Fix missed entry in PSR setup time table.
2018-06-06 16:44:38 +02:00
drm_dp_mst_topology.c
drm/dp_mst: Increase ACT retry timeout to 3s
2023-05-16 08:20:25 +09:00
drm_drv.c
drm: drm_minor_register(): Clean up debugfs on failure
2017-11-15 15:53:12 +01:00
drm_edid_load.c
…
drm_edid.c
drm/edid: Fix off-by-one in DispID DTD pixel clock
2023-05-15 17:24:33 +09:00
drm_encoder_slave.c
drm: encoder_slave: fix refcouting error for modules
2023-05-16 08:20:18 +09:00
drm_encoder.c
drm: Fix typo in encoder docs
2016-09-21 13:33:50 +02:00
drm_fb_cma_helper.c
drm: Use drm_format_info() in DRM core code
2018-08-14 19:03:19 -07:00
drm_fb_helper.c
drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
2023-05-15 11:01:50 +09:00
drm_flip_work.c
…
drm_fops.c
drm: Wake up next in drm_read() chain if we are forced to putback the event
2023-05-15 13:36:29 +09:00
drm_fourcc.c
drm: WARN when calling drm_format_info() for an unsupported format
2018-08-14 19:38:01 -07:00
drm_framebuffer.c
drm: Nuke modifier[1-3]
2018-08-14 19:41:01 -07:00
drm_gem_cma_helper.c
drm: Wrap direct calls to driver->gem_free_object from CMA
2016-06-01 15:00:28 +10:00
drm_gem.c
drm: hold gem reference until object is no longer accessed
2023-05-16 08:43:53 +09:00
drm_global.c
drm: modify drm_global_item_ref to avoid two times of writing ref->object
2016-09-14 15:10:29 -04:00
drm_hashtab.c
drm: fix signed integer overflow
2016-09-06 13:56:41 -04:00
drm_info.c
drm: Print device information again in debugfs
2016-10-17 16:20:53 +10:00
drm_internal.h
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_ioc32.c
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_ioctl.c
drm/ioctl: Fix Spectre v1 vulnerabilities
2023-05-15 10:45:38 +09:00
drm_irq.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_kms_helper_common.c
drm: Don't export dp-aux devnode functions
2016-08-16 18:49:26 +02:00
drm_legacy.h
drm: Hide hw.lock cleanup in filp->release better
2016-06-16 10:16:37 +02:00
drm_lock.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_memory.c
drm: Fix broken use of _PAGE_NO_CACHE on powerpc
2016-07-12 13:20:39 +02:00
drm_mipi_dsi.c
drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
2023-05-16 08:46:22 +09:00
drm_mm.c
drm: Apply range restriction after color adjustment when allocation
2017-11-30 08:39:13 +00:00
drm_mode_config.c
drm: Create a format/modifier blob
2018-08-14 19:42:25 -07:00
drm_mode_object.c
drm: Move property validation to a helper, v2.
2016-09-12 10:32:49 -04:00
drm_modes.c
drm/modes: Prevent division by zero htotal
2023-05-15 11:30:18 +09:00
drm_modeset_helper.c
drm: Plumb modifiers through plane init
2018-08-14 19:41:41 -07:00
drm_modeset_lock.c
drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all
2018-02-25 11:05:41 +01:00
drm_of.c
…
drm_panel.c
…
drm_pci.c
drm: Remove PageReserved manipulation from drm_pci_alloc
2023-05-15 17:15:05 +09:00
drm_plane_helper.c
drm: Fix kerneldoc in drm_plane_helper.c
2016-08-16 18:50:04 +02:00
drm_plane.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_platform.c
drm: Don't swallow error codes in drm_dev_alloc()
2016-09-22 04:03:48 -07:00
drm_prime.c
drm: Fix up kerneldoc for new drm_gem_dmabuf_export()
2016-10-10 11:19:42 +02:00
drm_print.c
drm: add helper for printing to log or seq_file
2018-08-14 19:38:46 -07:00
drm_probe_helper.c
drm: Flush output polling on shutdown
2023-05-15 14:32:12 +09:00
drm_property.c
drm: limit to INT_MAX in create_blob ioctl
2023-05-15 16:30:16 +09:00
drm_rect.c
drm: Warn about negative sizes when calculating scale factor
2016-08-08 14:17:56 -04:00
drm_scatter.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_simple_kms_helper.c
drm: Plumb modifiers through plane init
2018-08-14 19:41:41 -07:00
drm_sysfs.c
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_trace_points.c
…
drm_trace.h
…
drm_vm.c
drm: Fix broken use of _PAGE_NO_CACHE on powerpc
2016-07-12 13:20:39 +02:00
drm_vma_manager.c
drm: use drm_file to tag vm-bos
2016-09-19 11:22:08 +02:00
Kconfig
BACKPORT: drm/fence: add in-fences support
2017-05-23 15:47:18 -07:00
Makefile
drm: Extract drm_mode_config.[hc]
2018-08-14 19:40:39 -07:00