Re: [PATCH v3] drm/i915: Synchronize active and retire callbacks

From: Sultan Alsawaf
Date: Fri Apr 03 2020 - 22:42:34 EST


On Fri, Apr 03, 2020 at 03:35:15PM -0700, Sultan Alsawaf wrote:
> + ref->retire(ref);
> + mutex_unlock(&ref->callback_lock);

Ugh, this patch is still wrong because the mutex unlock after ref->retire() is a
use-after-free. Fun times...

Sultan