Commit 75dc75b0 authored Aug 25, 2020 by Narendra Muppalla Committed by Gerrit - the friendly Code Review server Dec 07, 2020

disp: msm: sde: return latest rsvp_next pointer on poll timeouts



To avoid use after free issues this change gets latest rsvp_next pointer
in poll timeout scenario.

Change-Id: I4bd4ce1ce9d4f5f2df0e814ceb8babe544578fc6
Signed-off-by: Narendra Muppalla <NarendraM@codeaurora.org>

parent 8d51384c

msm/sde/sde_rm.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -2126,8 +2126,8 @@ struct sde_rm_rsvp _sde_rm_poll_get_rsvp_nxt_locked(struct sde_rm rm,
		usleep_range(sleep, sleep * 2);
		mutex_lock(&rm->rm_lock);
		}

		return rsvp_nxt;
		/* make sure to get latest rsvp_next to avoid use after free issues */
		return _sde_rm_get_rsvp_nxt(rm, enc);
		}

		int sde_rm_reserve(