Re: [PATCH v4 1/3] drm/sched: cache the timeline name to fix a use-after-free

From: Philipp Stanner

Date: Mon Sep 07 2026 - 09:57:48 EST


On Mon, 2026-09-07 at 14:59 +0200, Christian König wrote:
> I think the memory ordering isn't really a problem.
>
> See if the ops pointer or the signaled bit is loaded first doesn't
> matter if you check both.
>
> You only need to make sure that the ops pointer is loaded once cause
> that one is used multiple times, but that is already the case by
> using rcu_dereference().

That.. sounds correct.

Although I still don't get why we then can't use the signaled state
everywhere instead of the ops pointer. That would be simpler.


Anyways.
Maybe Jonghyuk can give your patch a test run and then we could use it
as a hot-fix to backport and discuss the wider future of dma-fence
separately?


P.