From: Thierry Reding <thierry.reding@gmail.com>
To: Joerg Roedel <joro@8bytes.org>
Cc: Jon Hunter <jonathanh@nvidia.com>,
Krishna Reddy <vdumpa@nvidia.com>,
iommu@lists.linux-foundation.org, linux-tegra@vger.kernel.org
Subject: [PATCH 0/3] iommu/tegra-smmu: Reference count fixes
Date: Thu, 6 Aug 2020 17:54:01 +0200 [thread overview]
Message-ID: <20200806155404.3936074-1-thierry.reding@gmail.com> (raw)
From: Thierry Reding <treding@nvidia.com>
I was running into some use-after-free conditions after recent changes
to the host1x driver cause the child devices to be destroyed upon driver
unloading. This in turn caused the IOMMU groups associated with the
child devices to also get released and that uncovered a subtle reference
count unbalance.
This contains two fixes for these issues and also includes a patch that
sets the IOMMU group name for "static" groups to help with debugging.
Thierry
Thierry Reding (3):
iommu/tegra-smmu: Set IOMMU group name
iommu/tegra-smmu: Balance IOMMU group reference count
iommu/tegra-smmu: Prune IOMMU group when it is released
drivers/iommu/tegra-smmu.c | 18 +++++++++++++++++-
1 file changed, 17 insertions(+), 1 deletion(-)
--
2.27.0
next reply other threads:[~2020-08-06 17:26 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-08-06 15:54 Thierry Reding [this message]
2020-08-06 15:54 ` [PATCH 1/3] iommu/tegra-smmu: Set IOMMU group name Thierry Reding
2020-08-06 15:54 ` [PATCH 2/3] iommu/tegra-smmu: Balance IOMMU group reference count Thierry Reding
2020-08-06 15:54 ` [PATCH 3/3] iommu/tegra-smmu: Prune IOMMU group when it is released Thierry Reding
2020-09-04 9:00 ` [PATCH 0/3] iommu/tegra-smmu: Reference count fixes Joerg Roedel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200806155404.3936074-1-thierry.reding@gmail.com \
--to=thierry.reding@gmail.com \
--cc=iommu@lists.linux-foundation.org \
--cc=jonathanh@nvidia.com \
--cc=joro@8bytes.org \
--cc=linux-tegra@vger.kernel.org \
--cc=vdumpa@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).