drm: Remove "protection" around drm_vma_offset_manager_destroy()
authorChris Wilson <chris@chris-wilson.co.uk>
Mon, 3 Sep 2018 09:31:55 +0000 (10:31 +0100)
committerChris Wilson <chris@chris-wilson.co.uk>
Tue, 4 Sep 2018 18:00:32 +0000 (19:00 +0100)
commit5ddd6582cd7ba018b7527eed1777b7d83e6d9b62
tree2c899d75eff5d048f68d8157916ac729ec68f012
parenta9734d8ee63346865d5966551ef4aabf8016d8dd
drm: Remove "protection" around drm_vma_offset_manager_destroy()

Using a spinlock to serialize the destroy function, within the destroy
function itself does not prevent the buggy driver from shooting
themselves in the foot - either way they still have a use-after-free
issue.

Reported-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
Cc: Davidlohr Bueso <dave@stgolabs.net>
Cc: Liviu Dudau <Liviu.Dudau@arm.com>
Cc: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180903093155.3825-1-chris@chris-wilson.co.uk
drivers/gpu/drm/drm_vma_manager.c