Commit 730c4ff9 authored Aug 15, 2013 by Daniel Vetter Committed by Dave Airlie Aug 21, 2013

drm/prime: fix error path in drm_gem_prime_fd_to_handle



handle_unreference only clears up the obj->name and the reference,
but would leave a dangling handle in the idr. The right thing
to do is to call handle_delete.

Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Dave Airlie <airlied@redhat.com>

parent a8e11d1c

drivers/gpu/drm/drm_prime.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -476,7 +476,7 @@ int drm_gem_prime_fd_to_handle(struct drm_device *dev,
		/* hmm, if driver attached, we are relying on the free-object path
		* to detach.. which seems ok..
		*/
		drm_gem_object_handle_unreference_unlocked(obj);
		drm_gem_handle_delete(file_priv, *handle);
		out_put:
		dma_buf_put(dma_buf);
		mutex_unlock(&file_priv->prime.lock);