2
0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-09-04 20:19:47 +08:00
linux/drivers/gpu/drm/tegra
Thomas Zimmermann 16fdb3cc6a Revert "drm/tegra: Use dma_buf from GEM object instance"
This reverts commit 482c7e296e.

The dma_buf field in struct drm_gem_object is not stable over the
object instance's lifetime. The field becomes NULL when user space
releases the final GEM handle on the buffer object. This resulted
in a NULL-pointer deref.

Workarounds in commit 5307dce878 ("drm/gem: Acquire references on
GEM handles for framebuffers") and commit f6bfc9afc7 ("drm/framebuffer:
Acquire internal references on GEM handles") only solved the problem
partially. They especially don't work for buffer objects without a DRM
framebuffer associated.

Hence, this revert to going back to using .import_attach->dmabuf.

Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Reviewed-by: Simona Vetter <simona.vetter@ffwll.ch>
Link: https://lore.kernel.org/r/20250715084549.41473-1-tzimmermann@suse.de
2025-08-26 10:41:27 +02:00
..
dc.c drm/tegra: Fix a possible null pointer dereference 2025-05-07 18:07:27 +02:00
dc.h
dp.c drm/dp: Pull drm_dp_link_power_up/down from Tegra to common drm_dp_helper 2025-04-02 17:41:27 +03:00
dp.h drm/dp: Pull drm_dp_link_power_up/down from Tegra to common drm_dp_helper 2025-04-02 17:41:27 +03:00
dpaux.c drm/tegra: dpaux: Use dev_err_probe() 2025-05-07 17:44:03 +02:00
dpaux.h
drm.c drm: remove driver date from struct drm_driver and all drivers 2024-12-05 12:35:42 +02:00
drm.h drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct() 2025-07-16 20:11:34 +03:00
dsi.c drm/tegra: move to devm_platform_ioremap_resource() usage 2025-03-06 12:37:53 -05:00
dsi.h
falcon.c drm/tegra: falcon: Pipeline firmware copy 2025-05-07 17:47:36 +02:00
falcon.h drm/tegra: falcon: Pipeline firmware copy 2025-05-07 17:47:36 +02:00
fb.c drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct() 2025-07-16 20:11:34 +03:00
fbdev.c drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct() 2025-07-16 20:11:34 +03:00
firewall.c
gem.c Revert "drm/tegra: Use dma_buf from GEM object instance" 2025-08-26 10:41:27 +02:00
gem.h
gr2d.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
gr2d.h
gr3d.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
gr3d.h
hda.c
hda.h
hdmi.c drm/connector: make mode_valid take a const struct drm_display_mode 2025-01-07 12:45:19 +02:00
hdmi.h
hub.c drm/tegra: Assign plane type before registration 2025-05-07 17:16:56 +02:00
hub.h drm/tegra: Assign plane type before registration 2025-05-07 17:16:56 +02:00
Kconfig drm/tegra: Run DRM default client setup 2024-09-26 09:31:29 +02:00
Makefile
mipi-phy.c
mipi-phy.h
nvdec.c drm/tegra: nvdec: Fix dma_alloc_coherent error check 2025-07-04 11:15:07 +02:00
output.c drm/tegra: fix potential uninitialized variable use 2024-09-05 12:40:18 +02:00
plane.c
plane.h
rgb.c drm/tegra: rgb: Fix the unbound reference count 2025-05-07 18:06:14 +02:00
riscv.c
riscv.h
sor.c drm/dp: Pull drm_dp_link_power_up/down from Tegra to common drm_dp_helper 2025-04-02 17:41:27 +03:00
sor.h
submit.c
submit.h
trace.c
trace.h
uapi.c
uapi.h
vic.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
vic.h