mirror of
https://github.com/torvalds/linux.git
synced 2024-12-27 05:11:48 +00:00
ce020ea532
The field obejct_idr of struct drm_via_private was introduced with the
commit http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=77ee8f3825054f23b17e9c8f728f061defd86cdc .
In that patch idr_init(&dev->object_name_idr) was called instead of
idr_init(&dev_priv->object_idr) by mistake, leaving the dev_priv->object_idr
uninitialized. To be more exact, the object_idr buffer is filled with zeros
because of kzalloc(), but the dev_priv->object_idr.lock spinlock can cause
system freeze at lib/idr.c:move_to_free_list() when spin_lock_irqsave()
is called on this spinlock.
The patch was tested on Clevo D4J, model D410J laptop, on the following
hardware, without AGP kernel module loaded:
# lspci -s 01:00.0 -n
01:00.0 0300: 1106:3108 (rev 01)
# lspci -s 01:00.0 -v
01:00.0 VGA compatible controller: VIA Technologies, Inc. K8M800/K8N800/K8N800A [S3 UniChrome Pro] (rev 01) (prog-if 00 [VGA controller])
Subsystem: CLEVO/KAPOK Computer Device 4702
Flags: bus master, 66MHz, medium devsel, latency 64, IRQ 16
Memory at
|
||
|---|---|---|
| .. | ||
| Makefile | ||
| via_3d_reg.h | ||
| via_dma.c | ||
| via_dmablit.c | ||
| via_dmablit.h | ||
| via_drv.c | ||
| via_drv.h | ||
| via_irq.c | ||
| via_map.c | ||
| via_mm.c | ||
| via_verifier.c | ||
| via_verifier.h | ||
| via_video.c | ||