]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state
authorBen Skeggs <bskeggs@redhat.com>
Wed, 5 Apr 2017 08:16:14 +0000 (18:16 +1000)
committerBen Skeggs <bskeggs@redhat.com>
Thu, 6 Apr 2017 04:38:34 +0000 (14:38 +1000)
commitdf60d1f23b09c5ce2a8e404012323d4deedcc589
tree97a05ffa7ac220688988b5261c4f11c448d71307
parentaeecfcd7440e8ef3b31309fa743cd225090eb8d3
drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state

When the atomic support was added to nouveau, the DRM core did not do this.

However, later in the same merge window, a commit (drm/fence: add in-fences
support) was merged that added it, leading to use-after-frees of the fence
object.

Cc: stable@vger.kernel.org [4.10+]
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
drivers/gpu/drm/nouveau/nv50_display.c