summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJon Mayo <jmayo@nvidia.com>2013-07-18 17:37:19 -0700
committerGabby Lee <galee@nvidia.com>2013-09-10 19:01:41 -0700
commitb207f6c7eeebde3fdf3409a747218b19959705bd (patch)
tree3d0814ecbba2172335c7c9774355b698a2428eed
parent00f59aa9056306c3f4d079d1e61a15ffd971f13b (diff)
video: tegra: avoid double free in modedb
modedb can double free in some cases, or worse point to free'd memory that later gets allocated. Bug 1328121 Bug 1264520 Bug 1346938 Change-Id: Icc4bba24017a782501f27c4787a63a2e2680e4a7 Signed-off-by: Jon Mayo <jmayo@nvidia.com> Reviewed-on: http://git-master/r/251070 (cherry picked from commit 5fe405dbe4317a177182eea98d1a09c9891cfcad) Reviewed-on: http://git-master/r/269365 Reviewed-by: Automatic_Commit_Validation_User GVS: Gerrit_Virtual_Submit Reviewed-by: Gabby Lee <galee@nvidia.com> Tested-by: Gabby Lee <galee@nvidia.com>
-rw-r--r--drivers/video/tegra/fb.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/video/tegra/fb.c b/drivers/video/tegra/fb.c
index 2c853482bca6..20f4ca66c1b5 100644
--- a/drivers/video/tegra/fb.c
+++ b/drivers/video/tegra/fb.c
@@ -507,6 +507,7 @@ void tegra_fb_update_monspecs(struct tegra_fb_info *fb_info,
mutex_lock(&fb_info->info->lock);
fb_destroy_modedb(fb_info->info->monspecs.modedb);
+ fb_info->info->monspecs.modedb = NULL; /* avoid double free */
fb_destroy_modelist(&fb_info->info->modelist);