drm/msm: Implement .gem_free_object_unlocked
We use a llist and a worker to delay the object cleanup. This avoids taking mmap_sem and struct mutex in the wrong order when calling drm_gem_object_put-unlocked() from drm_gem_mmap(). Fixes lockdep problem with copy_from_user() in msm_ioctl_gem_submit(). Change-Id: Idfe54ae8108158b69f3835f26991642d1e21f8ee Signed-off-by: Kristian H. Kristensen <hoegsberg@chromium.org> Signed-off-by: Rob Clark <robdclark@chromium.org> Git-commit: 48e7f18392c66f9b69ebac11c54f1a2e033ced54 Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git [samtran@codeaurora.org: resolve trivial merge conflict] Signed-off-by: Samantha Tran <samtran@codeaurora.org>
This commit is contained in:

committad av
Samantha Tran

förälder
19e9831a45
incheckning
a145e793b2
@@ -1007,6 +1007,16 @@ void msm_gem_describe_objects(struct list_head *list, struct seq_file *m)
|
||||
void msm_gem_free_object(struct drm_gem_object *obj)
|
||||
{
|
||||
struct msm_gem_object *msm_obj = to_msm_bo(obj);
|
||||
struct drm_device *dev = obj->dev;
|
||||
struct msm_drm_private *priv = dev->dev_private;
|
||||
|
||||
if (llist_add(&msm_obj->freed, &priv->free_list))
|
||||
queue_work(priv->wq, &priv->free_work);
|
||||
}
|
||||
|
||||
static void free_object(struct msm_gem_object *msm_obj)
|
||||
{
|
||||
struct drm_gem_object *obj = &msm_obj->base;
|
||||
|
||||
/* object should not be on active list: */
|
||||
WARN_ON(is_active(msm_obj));
|
||||
@@ -1048,6 +1058,27 @@ void msm_gem_free_object(struct drm_gem_object *obj)
|
||||
kfree(msm_obj);
|
||||
}
|
||||
|
||||
void msm_gem_free_work(struct work_struct *work)
|
||||
{
|
||||
struct msm_drm_private *priv = container_of(work, struct msm_drm_private, free_work);
|
||||
struct drm_device *dev = priv->dev;
|
||||
struct llist_node *freed;
|
||||
struct msm_gem_object *msm_obj, *next;
|
||||
|
||||
while ((freed = llist_del_all(&priv->free_list))) {
|
||||
|
||||
mutex_lock(&dev->struct_mutex);
|
||||
|
||||
llist_for_each_entry_safe(msm_obj, next, freed, freed)
|
||||
free_object(msm_obj);
|
||||
|
||||
mutex_unlock(&dev->struct_mutex);
|
||||
|
||||
if (need_resched())
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
/* convenience method to construct a GEM buffer object, and userspace handle */
|
||||
int msm_gem_new_handle(struct drm_device *dev, struct drm_file *file,
|
||||
uint32_t size, uint32_t flags, uint32_t *handle,
|
||||
|
Referens i nytt ärende
Block a user