diff options
| author | Harrison Lingren <hlingren@google.com> | 2022-02-10 22:07:51 +0000 |
|---|---|---|
| committer | Harrison Lingren <hlingren@google.com> | 2022-02-10 22:08:55 +0000 |
| commit | 555d503797fe078c6f7b55eb157b3c64d9966ace (patch) | |
| tree | 6210c10292deb60f60519515a925b888da4e162a | |
| parent | 20e6af40b4f2288b9fd13020e62e0013c6c3db7c (diff) | |
| parent | 0b3a4e11f9fa7bb9cbccfe7b9e1877664ae908ea (diff) | |
| download | display-drivers-555d503797fe078c6f7b55eb157b3c64d9966ace.tar.gz | |
Merge branch 'android-msm-pixel-4.19-sc-security' into android-msm-pixel-4.19-sc-v2android-12.1.0_r0.20android-12.1.0_r0.14android-msm-redbull-4.19-android12L
Apr 2022.1
Bug: 215313369
Signed-off-by: Harrison Lingren <hlingren@google.com>
Change-Id: Ibfec28b04e90fbb93cfe8be01793329855b6d92a
| -rw-r--r-- | msm/msm_drv.c | 31 |
1 files changed, 25 insertions, 6 deletions
diff --git a/msm/msm_drv.c b/msm/msm_drv.c index 0ab8b1f0..c3f58be9 100644 --- a/msm/msm_drv.c +++ b/msm/msm_drv.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 2016-2020, The Linux Foundation. All rights reserved. + * Copyright (c) 2016-2021, The Linux Foundation. All rights reserved. * Copyright (C) 2013 Red Hat * Author: Rob Clark <robdclark@gmail.com> * @@ -65,6 +65,8 @@ #define IDLE_ENCODER_MASK_DEFAULT 1 #define IDLE_TIMEOUT_MS_DEFAULT 100 +static DEFINE_MUTEX(msm_release_lock); + static void msm_fb_output_poll_changed(struct drm_device *dev) { struct msm_drm_private *priv = NULL; @@ -1620,14 +1622,27 @@ void msm_mode_object_event_notify(struct drm_mode_object *obj, static int msm_release(struct inode *inode, struct file *filp) { - struct drm_file *file_priv = filp->private_data; - struct drm_minor *minor = file_priv->minor; - struct drm_device *dev = minor->dev; - struct msm_drm_private *priv = dev->dev_private; + struct drm_file *file_priv; + struct drm_minor *minor; + struct drm_device *dev; + struct msm_drm_private *priv; struct msm_drm_event *node, *temp, *tmp_node; u32 count; unsigned long flags; LIST_HEAD(tmp_head); + int ret = 0; + + mutex_lock(&msm_release_lock); + + file_priv = filp->private_data; + if (!file_priv) { + ret = -EINVAL; + goto end; + } + + minor = file_priv->minor; + dev = minor->dev; + priv = dev->dev_private; spin_lock_irqsave(&dev->event_lock, flags); list_for_each_entry_safe(node, temp, &priv->client_event_list, @@ -1664,7 +1679,11 @@ static int msm_release(struct inode *inode, struct file *filp) */ msm_preclose(dev, file_priv); - return drm_release(inode, filp); + ret = drm_release(inode, filp); + filp->private_data = NULL; +end: + mutex_unlock(&msm_release_lock); + return ret; } /** |