diff options
| author | Jeremy Kerr <jk@ozlabs.org> | 2008-01-11 08:27:10 -0500 |
|---|---|---|
| committer | Linus Torvalds <torvalds@woody.linux-foundation.org> | 2008-01-11 14:47:42 -0500 |
| commit | ba21611c9c0031ca8388cae5e43b38c29c8b595d (patch) | |
| tree | c2062639f66ea8aebd1b874f291cfdcc6aee7e27 /drivers/connector/cn_queue.c | |
| parent | b506d1b6c49a5884ff67a29bc99a1912ee20acee (diff) | |
ps3fb: prevent use after free of fb_info
In ps3fb_shutdown, freeing the framebuffer will cause fb_info (in
dev->core.driver_data) to be free()ed, which we potentially access
from the ps3fbd kthread.
This change frees the framebuffer after stopping the ps3fbd kthread.
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
Signed-off-by: Geert Uytterhoeven <Geert.Uytterhoeven@sonycom.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'drivers/connector/cn_queue.c')
0 files changed, 0 insertions, 0 deletions