forked from Minki/linux
drm/nouveau/core: Allow asymmetric nouveau_event_get/_put
Most nouveau event handlers have storage in 'static' containers (structures with lifetimes nearly equivalent to the drm_device), but are dangerously reused via nouveau_event_get/_put. For example, if nouveau_event_get is called more than once for a given handler, the event handler list will be corrupted. Signed-off-by: Peter Hurley <peter@hurleysoftware.com> Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
This commit is contained in:
parent
019255797d
commit
ac51bb0983
@ -27,11 +27,13 @@ static void
|
||||
nouveau_event_put_locked(struct nouveau_event *event, int index,
|
||||
struct nouveau_eventh *handler)
|
||||
{
|
||||
if (!--event->index[index].refs) {
|
||||
if (event->disable)
|
||||
event->disable(event, index);
|
||||
if (__test_and_clear_bit(NVKM_EVENT_ENABLE, &handler->flags)) {
|
||||
if (!--event->index[index].refs) {
|
||||
if (event->disable)
|
||||
event->disable(event, index);
|
||||
}
|
||||
list_del(&handler->head);
|
||||
}
|
||||
list_del(&handler->head);
|
||||
}
|
||||
|
||||
void
|
||||
@ -58,10 +60,12 @@ nouveau_event_get(struct nouveau_event *event, int index,
|
||||
return;
|
||||
|
||||
spin_lock_irqsave(&event->lock, flags);
|
||||
list_add(&handler->head, &event->index[index].list);
|
||||
if (!event->index[index].refs++) {
|
||||
if (event->enable)
|
||||
event->enable(event, index);
|
||||
if (!__test_and_set_bit(NVKM_EVENT_ENABLE, &handler->flags)) {
|
||||
list_add(&handler->head, &event->index[index].list);
|
||||
if (!event->index[index].refs++) {
|
||||
if (event->enable)
|
||||
event->enable(event, index);
|
||||
}
|
||||
}
|
||||
spin_unlock_irqrestore(&event->lock, flags);
|
||||
}
|
||||
|
@ -5,8 +5,12 @@
|
||||
#define NVKM_EVENT_DROP 0
|
||||
#define NVKM_EVENT_KEEP 1
|
||||
|
||||
/* nouveau_eventh.flags bit #s */
|
||||
#define NVKM_EVENT_ENABLE 0
|
||||
|
||||
struct nouveau_eventh {
|
||||
struct list_head head;
|
||||
unsigned long flags;
|
||||
void *priv;
|
||||
int (*func)(struct nouveau_eventh *, int index);
|
||||
};
|
||||
|
@ -95,7 +95,6 @@ nouveau_drm_vblank_enable(struct drm_device *dev, int head)
|
||||
|
||||
if (WARN_ON_ONCE(head >= ARRAY_SIZE(drm->vblank)))
|
||||
return -EIO;
|
||||
WARN_ON_ONCE(drm->vblank[head].func);
|
||||
drm->vblank[head].func = nouveau_drm_vblank_handler;
|
||||
nouveau_event_get(pdisp->vblank, head, &drm->vblank[head]);
|
||||
return 0;
|
||||
@ -106,11 +105,8 @@ nouveau_drm_vblank_disable(struct drm_device *dev, int head)
|
||||
{
|
||||
struct nouveau_drm *drm = nouveau_drm(dev);
|
||||
struct nouveau_disp *pdisp = nouveau_disp(drm->device);
|
||||
if (drm->vblank[head].func)
|
||||
nouveau_event_put(pdisp->vblank, head, &drm->vblank[head]);
|
||||
else
|
||||
WARN_ON_ONCE(1);
|
||||
drm->vblank[head].func = NULL;
|
||||
|
||||
nouveau_event_put(pdisp->vblank, head, &drm->vblank[head]);
|
||||
}
|
||||
|
||||
static u64
|
||||
|
Loading…
Reference in New Issue
Block a user