diff options
author | Benjamin Herrenschmidt <benh@kernel.crashing.org> | 2006-08-31 00:04:34 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@g5.osdl.org> | 2006-08-31 00:21:55 -0400 |
commit | 98a3c781057fa43494e7e8b39d639e93fca0ecbf (patch) | |
tree | 73a0cdcac3ec6ca0257de607efcfbedc8897fc07 /drivers/video | |
parent | 9129d6ea475b7e9f216c8324ea05b7a0d8aba540 (diff) |
[PATCH] fbdev: Fix crashes in various fbdev's blank routines
The backlight changes that went in had a bug where they could cause the
kernel to access an unitialized pointer when blanking if there is no
backlight control on a machine.
The bug affects atyfb, aty128fb, nvidiafb and rivafb. radeonfb seems to
be ok. This fixes it.
Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'drivers/video')
-rw-r--r-- | drivers/video/aty/aty128fb.c | 5 | ||||
-rw-r--r-- | drivers/video/aty/atyfb_base.c | 5 | ||||
-rw-r--r-- | drivers/video/nvidia/nv_backlight.c | 4 | ||||
-rw-r--r-- | drivers/video/riva/fbdev.c | 5 |
4 files changed, 15 insertions, 4 deletions
diff --git a/drivers/video/aty/aty128fb.c b/drivers/video/aty/aty128fb.c index 3e827e04a2aa..106d428b72c9 100644 --- a/drivers/video/aty/aty128fb.c +++ b/drivers/video/aty/aty128fb.c | |||
@@ -1800,6 +1800,9 @@ static struct backlight_properties aty128_bl_data = { | |||
1800 | 1800 | ||
1801 | static void aty128_bl_set_power(struct fb_info *info, int power) | 1801 | static void aty128_bl_set_power(struct fb_info *info, int power) |
1802 | { | 1802 | { |
1803 | if (info->bl_dev == NULL) | ||
1804 | return; | ||
1805 | |||
1803 | mutex_lock(&info->bl_mutex); | 1806 | mutex_lock(&info->bl_mutex); |
1804 | up(&info->bl_dev->sem); | 1807 | up(&info->bl_dev->sem); |
1805 | info->bl_dev->props->power = power; | 1808 | info->bl_dev->props->power = power; |
@@ -1828,7 +1831,7 @@ static void aty128_bl_init(struct aty128fb_par *par) | |||
1828 | bd = backlight_device_register(name, par, &aty128_bl_data); | 1831 | bd = backlight_device_register(name, par, &aty128_bl_data); |
1829 | if (IS_ERR(bd)) { | 1832 | if (IS_ERR(bd)) { |
1830 | info->bl_dev = NULL; | 1833 | info->bl_dev = NULL; |
1831 | printk("aty128: Backlight registration failed\n"); | 1834 | printk(KERN_WARNING "aty128: Backlight registration failed\n"); |
1832 | goto error; | 1835 | goto error; |
1833 | } | 1836 | } |
1834 | 1837 | ||
diff --git a/drivers/video/aty/atyfb_base.c b/drivers/video/aty/atyfb_base.c index 053ff63365b7..510e4ea296ed 100644 --- a/drivers/video/aty/atyfb_base.c +++ b/drivers/video/aty/atyfb_base.c | |||
@@ -2199,6 +2199,9 @@ static struct backlight_properties aty_bl_data = { | |||
2199 | 2199 | ||
2200 | static void aty_bl_set_power(struct fb_info *info, int power) | 2200 | static void aty_bl_set_power(struct fb_info *info, int power) |
2201 | { | 2201 | { |
2202 | if (info->bl_dev == NULL) | ||
2203 | return; | ||
2204 | |||
2202 | mutex_lock(&info->bl_mutex); | 2205 | mutex_lock(&info->bl_mutex); |
2203 | up(&info->bl_dev->sem); | 2206 | up(&info->bl_dev->sem); |
2204 | info->bl_dev->props->power = power; | 2207 | info->bl_dev->props->power = power; |
@@ -2223,7 +2226,7 @@ static void aty_bl_init(struct atyfb_par *par) | |||
2223 | bd = backlight_device_register(name, par, &aty_bl_data); | 2226 | bd = backlight_device_register(name, par, &aty_bl_data); |
2224 | if (IS_ERR(bd)) { | 2227 | if (IS_ERR(bd)) { |
2225 | info->bl_dev = NULL; | 2228 | info->bl_dev = NULL; |
2226 | printk("aty: Backlight registration failed\n"); | 2229 | printk(KERN_WARNING "aty: Backlight registration failed\n"); |
2227 | goto error; | 2230 | goto error; |
2228 | } | 2231 | } |
2229 | 2232 | ||
diff --git a/drivers/video/nvidia/nv_backlight.c b/drivers/video/nvidia/nv_backlight.c index b45f577094ac..14c37c42191c 100644 --- a/drivers/video/nvidia/nv_backlight.c +++ b/drivers/video/nvidia/nv_backlight.c | |||
@@ -112,6 +112,8 @@ static struct backlight_properties nvidia_bl_data = { | |||
112 | 112 | ||
113 | void nvidia_bl_set_power(struct fb_info *info, int power) | 113 | void nvidia_bl_set_power(struct fb_info *info, int power) |
114 | { | 114 | { |
115 | if (info->bl_dev == NULL) | ||
116 | return; | ||
115 | mutex_lock(&info->bl_mutex); | 117 | mutex_lock(&info->bl_mutex); |
116 | up(&info->bl_dev->sem); | 118 | up(&info->bl_dev->sem); |
117 | info->bl_dev->props->power = power; | 119 | info->bl_dev->props->power = power; |
@@ -140,7 +142,7 @@ void nvidia_bl_init(struct nvidia_par *par) | |||
140 | bd = backlight_device_register(name, par, &nvidia_bl_data); | 142 | bd = backlight_device_register(name, par, &nvidia_bl_data); |
141 | if (IS_ERR(bd)) { | 143 | if (IS_ERR(bd)) { |
142 | info->bl_dev = NULL; | 144 | info->bl_dev = NULL; |
143 | printk("nvidia: Backlight registration failed\n"); | 145 | printk(KERN_WARNING "nvidia: Backlight registration failed\n"); |
144 | goto error; | 146 | goto error; |
145 | } | 147 | } |
146 | 148 | ||
diff --git a/drivers/video/riva/fbdev.c b/drivers/video/riva/fbdev.c index 76fc9d355eb7..90363943bd57 100644 --- a/drivers/video/riva/fbdev.c +++ b/drivers/video/riva/fbdev.c | |||
@@ -354,6 +354,9 @@ static struct backlight_properties riva_bl_data = { | |||
354 | 354 | ||
355 | static void riva_bl_set_power(struct fb_info *info, int power) | 355 | static void riva_bl_set_power(struct fb_info *info, int power) |
356 | { | 356 | { |
357 | if (info->bl_dev == NULL) | ||
358 | return; | ||
359 | |||
357 | mutex_lock(&info->bl_mutex); | 360 | mutex_lock(&info->bl_mutex); |
358 | up(&info->bl_dev->sem); | 361 | up(&info->bl_dev->sem); |
359 | info->bl_dev->props->power = power; | 362 | info->bl_dev->props->power = power; |
@@ -382,7 +385,7 @@ static void riva_bl_init(struct riva_par *par) | |||
382 | bd = backlight_device_register(name, par, &riva_bl_data); | 385 | bd = backlight_device_register(name, par, &riva_bl_data); |
383 | if (IS_ERR(bd)) { | 386 | if (IS_ERR(bd)) { |
384 | info->bl_dev = NULL; | 387 | info->bl_dev = NULL; |
385 | printk("riva: Backlight registration failed\n"); | 388 | printk(KERN_WARNING "riva: Backlight registration failed\n"); |
386 | goto error; | 389 | goto error; |
387 | } | 390 | } |
388 | 391 | ||