diff options
| author | Dan Carpenter <error27@gmail.com> | 2010-12-09 08:35:40 +0300 |
|---|---|---|
| committer | Dave Airlie <airlied@redhat.com> | 2010-12-09 17:27:25 +1000 |
| commit | 6f331623b99e1900e3a664bbe6e95406ff4b27f4 (patch) | |
| tree | b85fe0a40e12e00b6c7881b14ef5fabbc45f7acd /lib/kernel_lock.c | |
| parent | e76116ca9671e2e5239054a40303b94feab585ad (diff) | |
drm: use after free in drm_queue_vblank_event()
The "e" pointer is either NULL or freed when we call
drm_vblank_put(dev, e->pipe) on the error path. Just pass the "pipe"
variable directly instead.
I changed another caller to use "pipe" as well for consistency.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Diffstat (limited to 'lib/kernel_lock.c')
0 files changed, 0 insertions, 0 deletions