From 3e47cf9e552a85c15f02bf064aeaeab4bd8a57ba Mon Sep 17 00:00:00 2001 From: Jayaprakash Madisetty Date: Wed, 7 Jul 2021 17:25:16 +0530 Subject: [PATCH] disp: msm: sde: update rsvp_cur when poll is enabled for rsvp_nxt This change updates rsvp_cur pointer to latest to avoid use after free issues. rsvp_cur pointer can be freed in few cases due to the unlock, wait and lock of rm_lock present in _sde_rm_poll_get_rsvp_nxt_locked. Change-Id: I389048188e8a615edc3e75dd1102d4ca8c74af65 Signed-off-by: Jayaprakash Madisetty --- msm/sde/sde_rm.c | 1 + 1 file changed, 1 insertion(+) diff --git a/msm/sde/sde_rm.c b/msm/sde/sde_rm.c index bed42da8d1d1..dafddd66f6ec 100644 --- a/msm/sde/sde_rm.c +++ b/msm/sde/sde_rm.c @@ -2464,6 +2464,7 @@ int sde_rm_reserve( */ if (test_only && rsvp_nxt) { rsvp_nxt = _sde_rm_poll_get_rsvp_nxt_locked(rm, enc); + rsvp_cur = _sde_rm_get_rsvp_cur(rm, enc); if (rsvp_nxt) { SDE_ERROR("poll timeout cur %d nxt %d enc %d\n", (rsvp_cur) ? rsvp_cur->seq : -1,