diff options
Diffstat (limited to 'kernel/gsp_sema_service.c')
| -rw-r--r-- | kernel/gsp_sema_service.c | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/kernel/gsp_sema_service.c b/kernel/gsp_sema_service.c index 146291c..6bf2b38 100644 --- a/kernel/gsp_sema_service.c +++ b/kernel/gsp_sema_service.c @@ -27233,6 +27233,7 @@ ce_fb_scan: * write target for GP_GET. */ u64 foreign_userd_pages[SVC_MAX_CHANNELS]; + u32 foreign_userd_as[SVC_MAX_CHANNELS]; unsigned long chflags; u32 foreign_userd_n = 0; u32 oi; @@ -27249,8 +27250,11 @@ ce_fb_scan: if (other->h_object == ch->h_object && other->vgpu == ch->vgpu) continue; - foreign_userd_pages[foreign_userd_n++] = + foreign_userd_pages[foreign_userd_n] = other->userd_pa & ~0xfffULL; + foreign_userd_as[foreign_userd_n] = + other->userd_as; + foreign_userd_n++; } spin_unlock_irqrestore(&svc.chan_lock, chflags); @@ -27296,7 +27300,16 @@ ce_fb_scan: */ page = off & ~0xfffULL; for (oi = 0; oi < foreign_userd_n; oi++) { - if (foreign_userd_pages[oi] == page) { + /* + * CONT.438b: the same numeric PA can + * exist in sysmem and vidmem (c23: + * X's 0x8f0000 sysmem block vs the + * RC watchdog's 0x8f0000 FB block). + * Only a same-aperture owner makes + * the candidate foreign. + */ + if (foreign_userd_pages[oi] == page && + foreign_userd_as[oi] == ch->userd_as) { foreign = true; break; } |