diff options
author | Guennadi Liakhovetski <g.liakhovetski@gmx.de> | 2010-09-03 07:19:57 +0000 |
---|---|---|
committer | Paul Mundt <lethal@linux-sh.org> | 2010-09-14 17:22:25 +0900 |
commit | 5ef6b505d9df45558402bdb823a078840a6a26c4 (patch) | |
tree | 9ce7965f1aff5195822962369ee2a2c671fcfdcf /kernel | |
parent | 6ee4845270d9b1e7ea348f9e3b6347f54f986abb (diff) | |
download | op-kernel-dev-5ef6b505d9df45558402bdb823a078840a6a26c4.zip op-kernel-dev-5ef6b505d9df45558402bdb823a078840a6a26c4.tar.gz |
fbdev: sh_mobile_lcdcfb: fix more error paths
This patch fixes the following two erroneous error paths:
hw_usecnt is allocated with a value of 0, therefore in an early error case,
calling sh_mobile_lcdc_clk_off() will wrongly conclude, that hw_usecnt has
already been incremented. Then sh_mobile_lcdc_runtime_suspend() will be called,
which will access uninitialised data fields and crash the kernel.
sh_mobile_lcdc_stop() can be called before framebuffer has been allocated, then
ch->info is NULL and dereferencing it will Oops too.
Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
Signed-off-by: Paul Mundt <lethal@linux-sh.org>
Diffstat (limited to 'kernel')
0 files changed, 0 insertions, 0 deletions