28 lines
1.0 KiB
Diff
28 lines
1.0 KiB
Diff
From: Dan Carpenter <dan.carpenter@oracle.com>
|
|
Date: Thu, 17 Dec 2015 15:39:08 +0300
|
|
Subject: [14/16] drm/vc4: allocate enough memory in vc4_save_hang_state()
|
|
Origin: http://cgit.freedesktop.org/~airlied/linux/commit?id=7e5082fbc00cc157e57a70cdb6b9bbb21289afb1
|
|
|
|
"state" is smaller than "kernel_state" so we end up corrupting memory.
|
|
|
|
Fixes: 214613656b51 ('drm/vc4: Add an interface for capturing the GPU state after a hang.')
|
|
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
|
|
Reviewed-by: Eric Anholt <eric@anholt.net>
|
|
---
|
|
drivers/gpu/drm/vc4/vc4_gem.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/drivers/gpu/drm/vc4/vc4_gem.c b/drivers/gpu/drm/vc4/vc4_gem.c
|
|
index 461a16c..1928c0a 100644
|
|
--- a/drivers/gpu/drm/vc4/vc4_gem.c
|
|
+++ b/drivers/gpu/drm/vc4/vc4_gem.c
|
|
@@ -145,7 +145,7 @@ vc4_save_hang_state(struct drm_device *dev)
|
|
unsigned long irqflags;
|
|
unsigned int i, unref_list_count;
|
|
|
|
- kernel_state = kcalloc(1, sizeof(*state), GFP_KERNEL);
|
|
+ kernel_state = kcalloc(1, sizeof(*kernel_state), GFP_KERNEL);
|
|
if (!kernel_state)
|
|
return;
|
|
|