diff options
| author |   Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com> | 2018-01-17 22:18:41 +0200 |
|---|---|---|
| committer | Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com> | 2018-04-26 13:48:22 +0300 |
| commit | 75a07f399cd43bc7fb41a13723fbe04e61c5c470 (patch) | |
| tree | 6133301fb55e1a1791430c5215a62ee8ae5b4324 /lib/test_overflow.c | |
| parent | Linux 4.17-rc2 (diff) | |
| download | linux-dev-75a07f399cd43bc7fb41a13723fbe04e61c5c470.tar.xz linux-dev-75a07f399cd43bc7fb41a13723fbe04e61c5c470.zip | |
drm: rcar-du: Zero-out sg_tables when duplicating plane state
The state structure for VSP-backed planes, rcar_du_vsp_plane_state,
contains sg tables that track framebuffer mapping performed in the
.prepare_fb() operation to unmap them in .cleanup_fb(). The tables are
incorrectly copied when duplicating state, which can result :
Zero-out sg_tables in original plane, effectively introducing move
semantic. Seems, this fixes issue with double-free,
when rcar_du_vsp_plane_cleanup_fb() freed the same sg_table
both in original plane and in the copy.
Reported-by: Volodymyr Babchuk <vlad.babchuk@gmail.com>
Signed-off-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
Diffstat (limited to 'lib/test_overflow.c')
0 files changed, 0 insertions, 0 deletions