MGS-3531 [#imx-865] fix gpu kernel panic issue

it is reproduced easily with multiple es11 cts tests,
gpu kernel panic in function _ConvertLogical2Physical.

need remove mdl from global list before destroy map list,
this can prevent the wrong access on the freed map data.

Date: Dec 22, 2017
Signed-off-by: Xianzhong <xianzhong.li@nxp.com>

diff --git a/drivers/mxc/gpu-viv/hal/os/linux/kernel/gc_hal_kernel_os.c b/drivers/mxc/gpu-viv/hal/os/linux/kernel/gc_hal_kernel_os.c
index 43df251..2ae5f21 100644 (file)
--- a/drivers/mxc/gpu-viv/hal/os/linux/kernel/gc_hal_kernel_os.c
+++ b/drivers/mxc/gpu-viv/hal/os/linux/kernel/gc_hal_kernel_os.c
@@ -242,11 +242,6 @@ _DestroyMdl(
             allocator->ops->Free(allocator, Mdl);
         }
 
-        list_for_each_entry_safe(mdlMap, next, &Mdl->mapsHead, link)
-        {
-            gcmkVERIFY_OK(_DestroyMdlMap(Mdl, mdlMap));
-        }
-
         if (Mdl->link.next)
         {
             /* Remove the node from global list.. */
@@ -255,6 +250,11 @@ _DestroyMdl(
             mutex_unlock(&os->mdlMutex);
         }
 
+        list_for_each_entry_safe(mdlMap, next, &Mdl->mapsHead, link)
+        {
+            gcmkVERIFY_OK(_DestroyMdlMap(Mdl, mdlMap));
+        }
+
         kfree(Mdl);
     }