提交 730c4ff9 编写于 作者: D Daniel Vetter 提交者: Dave Airlie

drm/prime: fix error path in drm_gem_prime_fd_to_handle

handle_unreference only clears up the obj->name and the reference,
but would leave a dangling handle in the idr. The right thing
to do is to call handle_delete.
Signed-off-by: NDaniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: NDave Airlie <airlied@redhat.com>
上级 a8e11d1c
...@@ -476,7 +476,7 @@ int drm_gem_prime_fd_to_handle(struct drm_device *dev, ...@@ -476,7 +476,7 @@ int drm_gem_prime_fd_to_handle(struct drm_device *dev,
/* hmm, if driver attached, we are relying on the free-object path /* hmm, if driver attached, we are relying on the free-object path
* to detach.. which seems ok.. * to detach.. which seems ok..
*/ */
drm_gem_object_handle_unreference_unlocked(obj); drm_gem_handle_delete(file_priv, *handle);
out_put: out_put:
dma_buf_put(dma_buf); dma_buf_put(dma_buf);
mutex_unlock(&file_priv->prime.lock); mutex_unlock(&file_priv->prime.lock);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册