drm: Remove two leaks of vblank reference count in error paths.

If the failing paths were hit, the vblank IRQ would never get turned off
again.

Signed-off-by: Eric Anholt <eric@anholt.net>
Acked-by: Keith Packard <keithp@keithp.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/drivers/gpu/drm/drm_irq.c b/drivers/gpu/drm/drm_irq.c
index 4091b9e291f9..212a94f715b2 100644
--- a/drivers/gpu/drm/drm_irq.c
+++ b/drivers/gpu/drm/drm_irq.c
@@ -594,11 +594,14 @@ int drm_wait_vblank(struct drm_device *dev, void *data,
                         goto done;
                 }
 
+                /* Get a refcount on the vblank, which will be released by
+                 * drm_vbl_send_signals().
+                 */
                 ret = drm_vblank_get(dev, crtc);
                 if (ret) {
                         drm_free(vbl_sig, sizeof(struct drm_vbl_sig),
                                  DRM_MEM_DRIVER);
-                        return ret;
+                        goto done;
                 }
 
                 atomic_inc(&dev->vbl_signal_pending);