drm/i915: Fix a use-after-free in intel_execlists_retire_requests
authorNick Hoath <nicholas.hoath@intel.com>
Thu, 29 Jan 2015 16:55:07 +0000 (16:55 +0000)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Fri, 30 Jan 2015 18:38:13 +0000 (19:38 +0100)
commitf82107950e9bda3779610e37bdfdccae6fc16f87
tree8e1a3a04253a1741dd0626b1dd5c9f7e623d8bb0
parented6739efc95e8c049f67000586f6317f3914a696
drm/i915: Fix a use-after-free in intel_execlists_retire_requests

Remove request from list before unreferencing it, in case it's actually
the only reference. (Found by Tvrtko Ursulin)

This issue has been most likely introduced in

commit 6d3d8274bc45de4babb62d64562d92af984dd238
Author: Nick Hoath <nicholas.hoath@intel.com>
Date:   Thu Jan 15 13:10:39 2015 +0000

    drm/i915: Subsume intel_ctx_submit_request in to drm_i915_gem_request

Signed-off-by: Nick Hoath <nicholas.hoath@intel.com>
Reviewed-by: Mika Kuoppala <mika.kuoppala@intel.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
drivers/gpu/drm/i915/intel_lrc.c