diff options
| author | Narendra Muppalla <NarendraM@codeaurora.org> | 2020-08-25 15:57:59 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2020-12-07 19:40:39 -0800 |
| commit | 75dc75b0d6048334c3676e01a2008fa45b507229 (patch) | |
| tree | ffea1cebbc276c935bf9a6bd2315b4d3c01396a3 | |
| parent | 8d51384c716e2c7e6ce50e17b026ec5f3c4c06c9 (diff) | |
| download | display-drivers-75dc75b0d6048334c3676e01a2008fa45b507229.tar.gz | |
disp: msm: sde: return latest rsvp_next pointer on poll timeouts
To avoid use after free issues this change gets latest rsvp_next pointer
in poll timeout scenario.
Change-Id: I4bd4ce1ce9d4f5f2df0e814ceb8babe544578fc6
Signed-off-by: Narendra Muppalla <NarendraM@codeaurora.org>
| -rw-r--r-- | msm/sde/sde_rm.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/msm/sde/sde_rm.c b/msm/sde/sde_rm.c index 7f3716b8..76e908b4 100644 --- a/msm/sde/sde_rm.c +++ b/msm/sde/sde_rm.c @@ -2126,8 +2126,8 @@ struct sde_rm_rsvp *_sde_rm_poll_get_rsvp_nxt_locked(struct sde_rm *rm, usleep_range(sleep, sleep * 2); mutex_lock(&rm->rm_lock); } - - return rsvp_nxt; + /* make sure to get latest rsvp_next to avoid use after free issues */ + return _sde_rm_get_rsvp_nxt(rm, enc); } int sde_rm_reserve( |