Ben Skeggs eac2095398 drm/ttm: unbind ttm before destroying node in accel move cleanup ...

Nouveau makes the assumption that if a TTM is bound there will be a mm_node
around for it and the backwards ordering here resulted in a use-after-free
on some eviction paths.

Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>

2011-08-23 09:35:16 +01:00

..

Makefile

drm/ttm: restructure to allow driver to plug in alternate memory manager

2010-10-05 10:01:20 +10:00

ttm_agp_backend.c

ttm: Expand (*populate) to support an array of DMA addresses.

2011-01-27 16:07:58 -05:00

ttm_bo_manager.c

drm/ttm: Use private locks for the default bo range manager

2010-11-09 13:33:24 +10:00

ttm_bo_util.c

drm/ttm: unbind ttm before destroying node in accel move cleanup

2011-08-23 09:35:16 +01:00

ttm_bo_vm.c

drm/ttm: Fix up io_mem_reserve / io_mem_free calling

2010-11-22 13:25:22 +10:00

ttm_bo.c

drm/ttm: fix ttm_bo_add_ttm(user) failure path

2011-08-23 09:34:18 +01:00

ttm_execbuf_util.c

drm/ttm/vmwgfx: Have TTM manage the validation sequence.

2010-11-22 13:25:21 +10:00

ttm_lock.c

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

ttm_memory.c

…

ttm_module.c

drm: move ttm global code to core drm

2010-08-04 09:46:06 +10:00

ttm_object.c

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

ttm_page_alloc.c

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

ttm_tt.c

drm/ttm: use shmem_read_mapping_page

2011-06-27 18:00:13 -07:00