diff options
author | Harrison Lingren <hlingren@google.com> | 2022-02-10 22:10:00 +0000 |
---|---|---|
committer | Harrison Lingren <hlingren@google.com> | 2022-02-10 22:10:00 +0000 |
commit | 8c1396971833ceb112767dce416a160ff13b1c9e (patch) | |
tree | c843a2fcd1596bf1c7dfb088bda75a1f5f3b0910 | |
parent | 4a9a34b444975776aa275f729f33cd7bdf151a6a (diff) | |
parent | bbb6c3fc0f45f3ee3a584abf73dbc37781770d75 (diff) | |
download | display-drivers-8c1396971833ceb112767dce416a160ff13b1c9e.tar.gz |
Merge branch 'android-msm-barbet-4.19-sc-security' into android-msm-barbet-4.19-sc-v2android-12.1.0_r0.21android-12.1.0_r0.15android-msm-barbet-4.19-android12L
Apr 2022.1
Bug: 215313369
Signed-off-by: Harrison Lingren <hlingren@google.com>
Change-Id: I8d741f34de17b824583e7a8aa2ff2fa1b45c950e
-rw-r--r-- | msm/msm_drv.c | 31 |
1 files changed, 25 insertions, 6 deletions
diff --git a/msm/msm_drv.c b/msm/msm_drv.c index 0ab8b1f0..c3f58be9 100644 --- a/msm/msm_drv.c +++ b/msm/msm_drv.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 2016-2020, The Linux Foundation. All rights reserved. + * Copyright (c) 2016-2021, The Linux Foundation. All rights reserved. * Copyright (C) 2013 Red Hat * Author: Rob Clark <robdclark@gmail.com> * @@ -65,6 +65,8 @@ #define IDLE_ENCODER_MASK_DEFAULT 1 #define IDLE_TIMEOUT_MS_DEFAULT 100 +static DEFINE_MUTEX(msm_release_lock); + static void msm_fb_output_poll_changed(struct drm_device *dev) { struct msm_drm_private *priv = NULL; @@ -1620,14 +1622,27 @@ void msm_mode_object_event_notify(struct drm_mode_object *obj, static int msm_release(struct inode *inode, struct file *filp) { - struct drm_file *file_priv = filp->private_data; - struct drm_minor *minor = file_priv->minor; - struct drm_device *dev = minor->dev; - struct msm_drm_private *priv = dev->dev_private; + struct drm_file *file_priv; + struct drm_minor *minor; + struct drm_device *dev; + struct msm_drm_private *priv; struct msm_drm_event *node, *temp, *tmp_node; u32 count; unsigned long flags; LIST_HEAD(tmp_head); + int ret = 0; + + mutex_lock(&msm_release_lock); + + file_priv = filp->private_data; + if (!file_priv) { + ret = -EINVAL; + goto end; + } + + minor = file_priv->minor; + dev = minor->dev; + priv = dev->dev_private; spin_lock_irqsave(&dev->event_lock, flags); list_for_each_entry_safe(node, temp, &priv->client_event_list, @@ -1664,7 +1679,11 @@ static int msm_release(struct inode *inode, struct file *filp) */ msm_preclose(dev, file_priv); - return drm_release(inode, filp); + ret = drm_release(inode, filp); + filp->private_data = NULL; +end: + mutex_unlock(&msm_release_lock); + return ret; } /** |