Tobias Jakobi a3cc326a43 drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() ... dc_state_destruct() nulls the resource context of the DC state. The pipe context passed to dcn10_set_drr() is a member of this resource context. If dc_state_destruct() is called parallel to the IRQ processing (which calls dcn10_set_drr() at some point), we can end up using already nulled function callback fields of struct stream_resource. The logic in dcn10_set_drr() already tries to avoid this, by checking tg against NULL. But if the nulling happens exactly after the NULL check and before the next access, then we get a race. Avoid this by copying tg first to a local variable, and then use this variable for all the operations. This should work, as long as nobody frees the resource pool where the timing generators live. Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3142 Fixes: 06ad7e1642 ("drm/amd/display: Destroy DC context while keeping DML and DML2") Signed-off-by: Tobias Jakobi <tjakobi@math.uni-bielefeld.de> Tested-by: Raoul van Rüschen <raoul.van.rueschen@gmail.com> Tested-by: Christopher Snowhill <chris@kode54.net> Reviewed-by: Harry Wentland <harry.wentland@amd.com> Tested-by: Sefa Eyeoglu <contact@scrumplex.net> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>		2024-09-06 17:39:02 -04:00
..
drm	drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()	2024-09-06 17:39:02 -04:00
host1x	driver core: have match() callback in struct bus_type take a const *	2024-07-03 15:16:54 +02:00
ipu-v3	Driver core changes for 6.11-rc1	2024-07-25 10:42:22 -07:00
trace
vga	drm: Do delayed switcheroo in drm_lastclose()	2024-08-13 16:21:07 +02:00
Makefile