drm/i915: fix use after free during eDP encoder destroying
authorImre Deak <imre.deak@intel.com>
Fri, 12 Dec 2014 15:57:38 +0000 (17:57 +0200)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Tue, 16 Dec 2014 09:38:55 +0000 (10:38 +0100)
commitc8bd0e49519ce1d80196e54ba2e20c3a1b7c88c0
tree5747a828ea1d69d988e56477c05a54dab16f17fc
parentc86ea3d0ad7e60fb92e3d4a0aa4906ec2868a7cd
drm/i915: fix use after free during eDP encoder destroying

After

commit a18c0af171bfb875012da26f23df051004726973
uthor: Thierry Reding <treding@nvidia.com>
Date:   Wed Dec 10 11:38:49 2014 +0100

    drm: Zero out DRM object memory upon cleanup

we will use the eDP encoder during destroying it. Fix this by calling
drm_encoder_cleanup() at a point when the encoder is not used any more.
This caused a NULL pointer dereference in pps_lock(), I can't see that
it caused any other problem.

All the other encoders seem to call drm_encoder_cleanup() at a safe
place.

Signed-off-by: Imre Deak <imre.deak@intel.com>
Reviewed-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
Reviewed-by: Thierry Reding <treding@nvidia.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
drivers/gpu/drm/i915/intel_dp.c
This page took 0.026094 seconds and 5 git commands to generate.