https://github.com/torvalds/linux
Revision 6f331623b99e1900e3a664bbe6e95406ff4b27f4 authored by Dan Carpenter on 09 December 2010, 05:35:40 UTC, committed by Dave Airlie on 09 December 2010, 07:27:25 UTC
The "e" pointer is either NULL or freed when we call
drm_vblank_put(dev, e->pipe) on the error path.  Just pass the "pipe"
variable directly instead.

I changed another caller to use "pipe" as well for consistency.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
1 parent e76116c
History
Tip revision: 6f331623b99e1900e3a664bbe6e95406ff4b27f4 authored by Dan Carpenter on 09 December 2010, 05:35:40 UTC
drm: use after free in drm_queue_vblank_event()
Tip revision: 6f33162
File Mode Size
Documentation
arch
block
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
tools
usr
virt
.gitignore -rw-r--r-- 936 bytes
.mailmap -rw-r--r-- 3.9 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 91.8 KB
Kbuild -rw-r--r-- 2.4 KB
Kconfig -rw-r--r-- 252 bytes
MAINTAINERS -rw-r--r-- 178.4 KB
Makefile -rw-r--r-- 50.9 KB
README -rw-r--r-- 17.1 KB
REPORTING-BUGS -rw-r--r-- 3.3 KB

README

back to top