diff options
| author | Maarten Lankhorst <maarten.lankhorst@linux.intel.com> | 2015-08-11 09:54:29 +0200 |
|---|---|---|
| committer | Jani Nikula <jani.nikula@intel.com> | 2015-08-11 12:30:38 +0300 |
| commit | 4772ff03df8094fd99d28de5fcf5df3a3e9c68bb (patch) | |
| tree | 2a4d3df228d96c5aac622bdcf1a7289a08bcc5bb /include/drm | |
| parent | 5677d67ae3949f09f57357241b88222d49b8c782 (diff) | |
| download | linux-4772ff03df8094fd99d28de5fcf5df3a3e9c68bb.tar.gz linux-4772ff03df8094fd99d28de5fcf5df3a3e9c68bb.tar.bz2 linux-4772ff03df8094fd99d28de5fcf5df3a3e9c68bb.zip | |
drm/dp/mst: Remove port after removing connector.
The port is removed synchronously, but the connector delayed.
This causes a use after free which can cause a kernel BUG with
slug_debug=FPZU. This is fixed by freeing the port after the
connector.
This fixes a regression introduced with
6b8eeca65b18ae77e175cc2b6571731f0ee413bf
"drm/dp/mst: close deadlock in connector destruction."
Cc: stable@vger.kernel.org
Cc: Dave Airlie <airlied@redhat.com>
Signed-off-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Jani Nikula <jani.nikula@intel.com>
Diffstat (limited to 'include/drm')
| -rw-r--r-- | include/drm/drm_crtc.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/include/drm/drm_crtc.h b/include/drm/drm_crtc.h index 57ca8cc383a6..3b4d8a4a23fb 100644 --- a/include/drm/drm_crtc.h +++ b/include/drm/drm_crtc.h @@ -743,8 +743,6 @@ struct drm_connector { uint8_t num_h_tile, num_v_tile; uint8_t tile_h_loc, tile_v_loc; uint16_t tile_h_size, tile_v_size; - - struct list_head destroy_list; }; /** |