summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMark Yao <mark.yao@rock-chips.com>2016-07-01 19:05:37 +0000
committerandroid-build-merger <android-build-merger@google.com>2016-07-01 19:05:37 +0000
commit19d91eec5357e7cebde797a48de8609ae3a89484 (patch)
tree7540263fd9441ccfd4de8b7c4dc378f1e34197e1
parentcda66b80878c0c0f0799a145b41895c1149da88a (diff)
parent63dd4c897693a614f9eedff817116f34590514ad (diff)
downloaddrm_gralloc-19d91eec5357e7cebde797a48de8609ae3a89484.tar.gz
drm_gralloc: fix random crash with wildpointer am: 99e2a21625
am: 63dd4c8976 Change-Id: I4bd8c55bec3767b06b5965fa2795bb74f57929be
-rw-r--r--gralloc_drm.cpp11
1 files changed, 10 insertions, 1 deletions
diff --git a/gralloc_drm.cpp b/gralloc_drm.cpp
index 6f90a84..b0328b0 100644
--- a/gralloc_drm.cpp
+++ b/gralloc_drm.cpp
@@ -194,7 +194,15 @@ static struct gralloc_drm_bo_t *validate_handle(buffer_handle_t _handle,
*/
int gralloc_drm_handle_register(buffer_handle_t handle, struct gralloc_drm_t *drm)
{
- return (validate_handle(handle, drm)) ? 0 : -EINVAL;
+ struct gralloc_drm_bo_t *bo;
+
+ bo = validate_handle(handle, drm);
+ if (!bo)
+ return -EINVAL;
+
+ bo->refcount++;
+
+ return 0;
}
/*
@@ -208,6 +216,7 @@ int gralloc_drm_handle_unregister(buffer_handle_t handle)
if (!bo)
return -EINVAL;
+ gralloc_drm_bo_decref(bo);
if (bo->imported)
gralloc_drm_bo_decref(bo);