]> rtime.felk.cvut.cz Git - sojka/nv-tegra/linux-3.10.git/commit
gpu: nvgpu: Swap order of free/rb_erase
authorAlex Waterman <alexw@nvidia.com>
Wed, 10 Jun 2015 17:25:10 +0000 (10:25 -0700)
committerTerje Bergstrom <tbergstrom@nvidia.com>
Wed, 10 Jun 2015 22:52:47 +0000 (15:52 -0700)
commit5e9724997049f7c9f1d93fdd3f892b7d92c47fb3
tree3ddd07eb7cb98e438b351e5e2ab1f52e0c0d8758
parent73c238a7c5dec24d4b5dab91e23189121df972e6
gpu: nvgpu: Swap order of free/rb_erase

If rb_erase() is called after __balloc_do_free_fixed() then the
rb_tree code crashes when trying to dereference the possibly changed
(or poisoned in the case of debugging) data in the rb_node.

Change-Id: I4a4456a5ec453fd9ab117c804dc19b2c048a61d4
Signed-off-by: Alex Waterman <alexw@nvidia.com>
Reviewed-on: http://git-master/r/755646
Reviewed-by: Automatic_Commit_Validation_User
Reviewed-by: Krishna Reddy <vdumpa@nvidia.com>
Reviewed-by: Ian Stewart <istewart@nvidia.com>
Reviewed-by: Terje Bergstrom <tbergstrom@nvidia.com>
drivers/gpu/nvgpu/gk20a/gk20a_allocator.c