similar to: [Bug 72599] New: [NVC0] null pointer dereference (nouveau_fence_wait_uevent.isra.5)

https://bugs.freedesktop.org/show_bug.cgi?id=71620 Priority: medium Bug ID: 71620 Assignee: nouveau at lists.freedesktop.org Summary: nouveau_fence_wait_uevent NULL pointer dereference Severity: normal Classification: Unclassified OS: Linux (All) Reporter: kdatanasov at gmail.com Hardware: x86-64 (AMD64)

Provide private field for event handlers exclusive use. Convert nouveau_fence_wait_uevent() and nouveau_fence_wait_uevent_handler(); drop struct nouveau_fence_uevent. Signed-off-by: Peter Hurley <peter at hurleysoftware.com> --- drivers/gpu/drm/nouveau/core/include/core/event.h | 1 + drivers/gpu/drm/nouveau/nouveau_fence.c | 20 +++++++------------- 2 files changed, 8

https://bugs.freedesktop.org/show_bug.cgi?id=82975 Priority: medium Bug ID: 82975 Assignee: nouveau at lists.freedesktop.org Summary: Regression: NULL pointer dereference in nouveau_fence_wait after upgrading to 10.2.6 QA Contact: xorg-team at lists.x.org Severity: major Classification: Unclassified

https://bugs.freedesktop.org/show_bug.cgi?id=84424 Priority: medium Bug ID: 84424 Assignee: nouveau at lists.freedesktop.org Summary: nouveau crash log [mesa-10.3.0] Severity: normal Classification: Unclassified OS: All Reporter: reuben.m at gmail.com Hardware: Other Status: NEW

Prepare for transition to RCU-based event handler list; since RCU list traversal may have stale pointers, local storage may go out of scope before handler completes. Introduce nouveau_event_handler_create/_destroy which provides suitable semantics for multiple, temporary event handlers. Signed-off-by: Peter Hurley <peter at hurleysoftware.com> --- drivers/gpu/drm/nouveau/core/core/event.c

On Wed, Aug 28, 2013 at 6:12 AM, Peter Hurley <peter at hurleysoftware.com> wrote: > This series was originally motivated by a deadlock, introduced in > commit 1d7c71a3e2f77336df536855b0efd2dc5bdeb41b > 'drm/nouveau/disp: port vblank handling to event interface', > due to inverted lock order between nouveau_drm_vblank_enable() > and nouveau_drm_vblank_handler() (the

From: Maarten Lankhorst <maarten.lankhorst at ubuntu.com> Signed-off-by: Maarten Lankhorst <maarten.lankhorst at canonical.com> --- drivers/gpu/drm/nouveau/core/core/event.c | 4 drivers/gpu/drm/nouveau/nouveau_bo.c | 6 drivers/gpu/drm/nouveau/nouveau_display.c | 4 drivers/gpu/drm/nouveau/nouveau_fence.c | 434 ++++++++++++++++++++---------

This series was originally motivated by a deadlock, introduced in commit 1d7c71a3e2f77336df536855b0efd2dc5bdeb41b 'drm/nouveau/disp: port vblank handling to event interface', due to inverted lock order between nouveau_drm_vblank_enable() and nouveau_drm_vblank_handler() (the complete lockdep report is included in the patch 4/5 changelog). Because this series fixes the vblank event

https://bugs.freedesktop.org/show_bug.cgi?id=82704 Priority: medium Bug ID: 82704 Assignee: nouveau at lists.freedesktop.org Summary: kernel bug Severity: normal Classification: Unclassified OS: All Reporter: mattia.b89 at gmail.com Hardware: Other Status: NEW Version: 10.2

Skipped content of type multipart/alternative-------------- next part -----= --------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 9869 bytes Desc: not available Url : http://lists.linux-foundation.org/pipermail/virtualization/attachment= s/20060923/5e814e91/attachment.png

Skipped content of type multipart/alternative-------------- next part -----= --------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 9869 bytes Desc: not available Url : http://lists.linux-foundation.org/pipermail/virtualization/attachment= s/20060923/5e814e91/attachment.png

Update, for those that want to know... The attacker used a worm or bot that tried hundreds (if not thousands) of connections through SMBD. (Samba). I was running 2.2.7. I noticed the attempts for a week, but the log file always showed "access denied" so I wasn't too worried about it. Well, obviously, one of those attempts got through... At this time, the worm (or bot) modified

https://bugs.freedesktop.org/show_bug.cgi?id=97462 Bug ID: 97462 Summary: Graphics deadlock "ILLEGAL_MTHD" in nouveau with mesa version 11.2.2 when visiting Google Maps with firefox 49.0b5 Product: xorg Version: unspecified Hardware: x86-64 (AMD64) OS: Linux (All)

This series depends on the previously posted reservation api patches. 2 of them are not yet in for-next-fences branch of git://git.linaro.org/people/sumit.semwal/linux-3.x.git The missing patches are still in my vmwgfx_wip branch at git://people.freedesktop.org/~mlankhorst/linux All ttm drivers are converted to the fence api, fence_lock is removed and rcu is used in its place. qxl is the first

fence_is_signaled callback should support being run in atomic context, but not in irq context. Signed-off-by: Maarten Lankhorst <maarten.lankhorst at canonical.com> --- include/linux/fence.h | 23 +++++++++++++++++++---- 1 file changed, 19 insertions(+), 4 deletions(-) diff --git a/include/linux/fence.h b/include/linux/fence.h index d174585b874b..c1a4519ba2f5 100644 ---

This series applies on top of the driver-core-next branch of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core.git Before converting ttm to the new fence interface I had to fix some drivers to require a reservation before poking with fence_obj. After flipping the switch RCU becomes available instead, and the extra reservations can be dropped again. :-) I've done at least basic