| commit | 2907e8670b6ef253bffb33bf47fd2182969cf2a0 | [log] [tgz] |
|---|---|---|
| author | Ben Skeggs <bskeggs@redhat.com> | Wed Apr 05 18:16:14 2017 +1000 |
| committer | Ben Skeggs <bskeggs@redhat.com> | Thu Apr 06 14:19:21 2017 +1000 |
| tree | 830a0ed370b23ceaf0f8529ff434dd8da570552b | |
| parent | d639fbcc102745187f747a21bdcffcf628e174c8 [diff] |
drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state When the atomic support was added to nouveau, the DRM core did not do this. However, later in the same merge window, a commit (drm/fence: add in-fences support) was merged that added it, leading to use-after-frees of the fence object. Cc: stable@vger.kernel.org [4.10+] Signed-off-by: Ben Skeggs <bskeggs@redhat.com>