Thomas Zimmermann 16fdb3cc6a Revert "drm/tegra: Use dma_buf from GEM object instance" ... This reverts commit 482c7e296e. The dma_buf field in struct drm_gem_object is not stable over the object instance's lifetime. The field becomes NULL when user space releases the final GEM handle on the buffer object. This resulted in a NULL-pointer deref. Workarounds in commit 5307dce878 ("drm/gem: Acquire references on GEM handles for framebuffers") and commit f6bfc9afc7 ("drm/framebuffer: Acquire internal references on GEM handles") only solved the problem partially. They especially don't work for buffer objects without a DRM framebuffer associated. Hence, this revert to going back to using .import_attach->dmabuf. Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de> Reviewed-by: Simona Vetter <simona.vetter@ffwll.ch> Link: https://lore.kernel.org/r/20250715084549.41473-1-tzimmermann@suse.de		2025-08-26 10:41:27 +02:00
..
dc.c	drm/tegra: Fix a possible null pointer dereference	2025-05-07 18:07:27 +02:00
dc.h
dp.c
dp.h
dpaux.c	drm/tegra: dpaux: Use dev_err_probe()	2025-05-07 17:44:03 +02:00
dpaux.h
drm.c
drm.h	drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()	2025-07-16 20:11:34 +03:00
dsi.c
dsi.h
falcon.c	drm/tegra: falcon: Pipeline firmware copy	2025-05-07 17:47:36 +02:00
falcon.h	drm/tegra: falcon: Pipeline firmware copy	2025-05-07 17:47:36 +02:00
fb.c	drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()	2025-07-16 20:11:34 +03:00
fbdev.c	drm/tegra: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()	2025-07-16 20:11:34 +03:00
firewall.c
gem.c	Revert "drm/tegra: Use dma_buf from GEM object instance"	2025-08-26 10:41:27 +02:00
gem.h
gr2d.c
gr2d.h
gr3d.c
gr3d.h
hda.c
hda.h
hdmi.c
hdmi.h
hub.c
hub.h
Kconfig
Makefile
mipi-phy.c
mipi-phy.h
nvdec.c	drm/tegra: nvdec: Fix dma_alloc_coherent error check	2025-07-04 11:15:07 +02:00
output.c
plane.c
plane.h
rgb.c	drm/tegra: rgb: Fix the unbound reference count	2025-05-07 18:06:14 +02:00
riscv.c
riscv.h
sor.c
sor.h
submit.c
submit.h
trace.c
trace.h
uapi.c
uapi.h
vic.c
vic.h