[PATCH] drm: imx: convert to drm_crtc_send_vblank_event()

Philipp Zabel p.zabel at pengutronix.de
Wed Nov 25 03:06:33 PST 2015


Hi Russell,

Am Mittwoch, den 25.11.2015, 10:25 +0000 schrieb Russell King:
> ipu_crtc_handle_pageflip() was calling drm_send_vblank_event() with
> a pipe argument of -1.  Commit cc1ef118fc09 ("drm/irq: Make pipe
> unsigned and name consistent") now makes this error obvious, as we
> now may get a warning from:
> 
> 	if (WARN_ON(pipe >= dev->num_crtcs))
> 
> in drm_vblank_count_and_time().  Prior to this change, we would end
> up making out-of-bounds array accesses via:
> 
> 	struct drm_vblank_crtc *vblank = &dev->vblank[crtc];
> and
> 	*vblanktime = vblanktimestamp(dev, pipe, cur_vblank);
> 
> So, this has been broken for a very long time, and is not a result
> of the above commit.  Since we don't care about the staging versions,
> I've tagged this with the earliest mainline commit where we do care,
> even though this commit did not introduce the bug.
> 
> Fixes: 6556f7f82b9c ("drm: imx: Move imx-drm driver out of staging")
> Signed-off-by: Russell King <rmk+kernel at arm.linux.org.uk>

thank you for the patch. Thierry had sent a fix previously [1], but I
don't think it is applied yet. If nobody minds, I'd like to add this to
imx-drm/fixes as opposed to the older patch.

[1] https://patchwork.kernel.org/patch/7258101/

regards
Philipp



More information about the dri-devel mailing list