summaryrefslogtreecommitdiffstats
path: root/drivers/gpu/drm
diff options
context:
space:
mode:
authorChris Wilson2012-07-15 13:34:23 +0200
committerDaniel Vetter2012-07-25 10:39:58 +0200
commitb259b3120607f642daabdaadc99430a306899ffe (patch)
tree4da2ddab5e4470ca1b89f47ff1b2c1fec7806e3e /drivers/gpu/drm
parentdrm/i915: Add -EIO to the list of known errors for __wait_seqno (diff)
downloadkernel-qcow2-linux-b259b3120607f642daabdaadc99430a306899ffe.tar.gz
kernel-qcow2-linux-b259b3120607f642daabdaadc99430a306899ffe.tar.xz
kernel-qcow2-linux-b259b3120607f642daabdaadc99430a306899ffe.zip
drm/i915: fix invalid reference handling of the default ctx obj
Otherwise we end up trying to unpin a freed object and BUG. Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk> Reviewed-by: Ben Widawsky <ben@bwidawsk.net> Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Diffstat (limited to 'drivers/gpu/drm')
-rw-r--r--drivers/gpu/drm/i915/i915_gem_context.c18
1 files changed, 4 insertions, 14 deletions
diff --git a/drivers/gpu/drm/i915/i915_gem_context.c b/drivers/gpu/drm/i915/i915_gem_context.c
index 65639ad72808..873119f2436e 100644
--- a/drivers/gpu/drm/i915/i915_gem_context.c
+++ b/drivers/gpu/drm/i915/i915_gem_context.c
@@ -419,8 +419,11 @@ static int do_switch(struct drm_i915_gem_object *from_obj,
from_obj->dirty = 1;
BUG_ON(from_obj->ring != to->ring);
i915_gem_object_unpin(from_obj);
+
+ drm_gem_object_unreference(&from_obj->base);
}
+ drm_gem_object_reference(&to->obj->base);
ring->last_context_obj = to->obj;
to->is_initialized = true;
@@ -470,20 +473,7 @@ int i915_switch_context(struct intel_ring_buffer *ring,
if (from_obj == to->obj)
return 0;
- ret = do_switch(from_obj, to, i915_gem_next_request_seqno(to->ring));
- if (ret)
- return ret;
-
- /* Just to make the code a little cleaner we take the object reference
- * after the switch was successful. It would be more intuitive to ref
- * the 'to' object before the switch but we know the refcount must be >0
- * if context_get() succeeded, and we hold struct mutex. So it's safe to
- * do this here/now
- */
- drm_gem_object_reference(&to->obj->base);
- if (from_obj != NULL)
- drm_gem_object_unreference(&from_obj->base);
- return ret;
+ return do_switch(from_obj, to, i915_gem_next_request_seqno(to->ring));
}
int i915_gem_context_create_ioctl(struct drm_device *dev, void *data,