https://bugs.freedesktop.org/show_bug.cgi?id=79823
--- Comment #10 from Natrio <[email protected]> --- Bisect complete, I was right. 507f0230d4ca2238c818006499e21abb4c133203 is the first bad commit commit 507f0230d4ca2238c818006499e21abb4c133203 Author: Ilia Mirkin <[email protected]> Date: Wed Mar 5 22:25:55 2014 -0500 nouveau: fix fence waiting logic in screen destroy nouveau_fence_wait has the expectation that an external entity is holding onto the fence being waited on, not that it is merely held onto by the current pointer. Fixes a use-after-free in nouveau_fence_wait when used on the screen's current fence. Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=75279 Signed-off-by: Ilia Mirkin <[email protected]> Reviewed-by: Christoph Bumiller <[email protected]> Cc: "9.2 10.0 10.1" <[email protected]> :040000 040000 46ad31dd95db1695a8c91fffbf38ee7822d8a31f cdf816d872018460b33f69949010f09dcdcbf38e M src -- You are receiving this mail because: You are the assignee for the bug.
_______________________________________________ Nouveau mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/nouveau
