Unverified Commit 55013507 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!5834 CVE-2021-47144 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liu Mingrui <liumingrui@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/YAGOTLVU4KMMMQGKV5SH2ANQEW5FB7S5/ 
CVE-2021-47144

Jingwen Chen (1):
  drm/amd/amdgpu: fix refcount leak


-- 
2.25.1
 
https://gitee.com/src-openeuler/kernel/issues/I9BGUR 
 
Link:https://gitee.com/openeuler/kernel/pulls/5834

 

Reviewed-by: default avatarZhang Jianhua <chris.zjh@huawei.com>
Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 11b92ddc 50783b0b

drivers/gpu/drm/amd/amdgpu/amdgpu_fb.c

+3 −0
Original line number Diff line number Diff line
@@ -297,10 +297,13 @@ static int amdgpufb_create(struct drm_fb_helper *helper, 
static int amdgpu_fbdev_destroy(struct drm_device *dev, struct amdgpu_fbdev *rfbdev)

{

	struct amdgpu_framebuffer *rfb = &rfbdev->rfb;

	int i;



	drm_fb_helper_unregister_fbi(&rfbdev->helper);



	if (rfb->base.obj[0]) {

		for (i = 0; i < rfb->base.format->num_planes; i++)

			drm_gem_object_put(rfb->base.obj[0]);

		amdgpufb_destroy_pinned_object(rfb->base.obj[0]);

		rfb->base.obj[0] = NULL;

		drm_framebuffer_unregister_private(&rfb->base);