diff options
| author | Maarten Lankhorst | 2015-11-11 11:29:08 +0100 |
|---|---|---|
| committer | Jani Nikula | 2015-11-17 12:02:13 +0100 |
| commit | 4572372847680ee04f184df916d5cf007c94ff7e (patch) | |
| tree | 8eafa5ba14dc1ce9da881cc04d3471df6ea39e5a /include/drm/drm_atomic.h | |
| parent | drm/core: Set legacy_cursor_update in drm_atomic_helper_disable_plane. (diff) | |
| download | kernel-qcow2-linux-4572372847680ee04f184df916d5cf007c94ff7e.tar.gz kernel-qcow2-linux-4572372847680ee04f184df916d5cf007c94ff7e.tar.xz kernel-qcow2-linux-4572372847680ee04f184df916d5cf007c94ff7e.zip | |
drm/core: Fix old_fb handling in drm_mode_atomic_ioctl.
plane_mask should be cleared inside the retry loop, because it gets
reset on every retry. Without this fix the plane->fb refcounting might
get out of sync on retries, resulting in either leaked memory or
use-after-free.
Signed-off-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Cc: stable@vger.kernel.org #v4.3
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Jani Nikula <jani.nikula@intel.com>
Link: http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-3-git-send-email-maarten.lankhorst@ubuntu.com
Diffstat (limited to 'include/drm/drm_atomic.h')
0 files changed, 0 insertions, 0 deletions