A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 06:09:23 -04:00
Code Issues Projects Releases Packages Wiki Activity

disp: msm: sde: update rsvp_cur when poll is enabled for rsvp_nxt

Browse source 
This change updates rsvp_cur pointer to latest to avoid use
after free issues. rsvp_cur pointer can be freed in few cases due
to the unlock, wait and lock of rm_lock present in
_sde_rm_poll_get_rsvp_nxt_locked.

Change-Id: I389048188e8a615edc3e75dd1102d4ca8c74af65
Signed-off-by: Jayaprakash Madisetty <jmadiset@codeaurora.org>
This commit is contained in:
Jayaprakash Madisetty 2021-07-07 17:25:16 +05:30
commit 3e47cf9e55
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
msm/sde/sde_rm.c
View file

@ -2464,6 +2464,7 @@ int sde_rm_reserve(
*/
if (test_only && rsvp_nxt) {
rsvp_nxt = _sde_rm_poll_get_rsvp_nxt_locked(rm, enc);
rsvp_cur = _sde_rm_get_rsvp_cur(rm, enc);
if (rsvp_nxt) {
SDE_ERROR("poll timeout cur %d nxt %d enc %d\n",
(rsvp_cur) ? rsvp_cur->seq : -1,