[Bug 93580] intel_fbdev_restore_mode derefence null pointer

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=93580

freedesktop.org at rhug.at changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |freedesktop.org at rhug.at

--- Comment #5 from freedesktop.org at rhug.at ---
I just had the same issue with kernel 4.5.4 on Archlinux using a lenovo
Thinkpad T60.

$ uname -a
Linux thinkpad 4.5.4-1-ARCH #1 SMP PREEMPT Wed May 11 22:21:28 CEST 2016 x86_64
GNU/Linux

$ lspci -vnn | grep VGA -A 1
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile 945GM/GMS,
943/940GML Express Integrated Graphics Controller [8086:27a2] (rev 03) (prog-if
00 [VGA controller])
        Subsystem: Lenovo ThinkPad R60/T60/X60 series [17aa:201a]

kernel log:
BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
IP: [<ffffffffa08855a8>] intel_fbdev_restore_mode+0x48/0x80 [i915]
PGD 733a3067 PUD 733cc067 PMD 0 
Oops: 0000 [#1] PREEMPT SMP 
Modules linked in: mousedev iTCO_wdt iTCO_vendor_support ppdev i915 coretemp
pcmcia kvm drm_
 af_alg dm_crypt dm_mod sd_mod sr_mod cdrom ata_generic pata_acpi atkbd libps2
ahci libahci 
CPU: 1 PID: 395 Comm: Xorg.wrap Not tainted 4.5.4-1-ARCH #1
Hardware name: LENOVO 1952VYF/1952VYF, BIOS 79ETD2WW (2.12 ) 04/12/2007
task: ffff88007a3db400 ti: ffff8800733c4000 task.ti: ffff8800733c4000
RIP: 0010:[<ffffffffa08855a8>]  [<ffffffffa08855a8>]
intel_fbdev_restore_mode+0x48/0x80 [i91
RSP: 0018:ffff8800733c7dc0  EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff880079edbc00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88000006c060
RBP: ffff8800733c7dc8 R08: 0000000000000000 R09: ffff88007ef157b0
R10: ffff88007a315600 R11: 0000000000000001 R12: ffff88000006c000
R13: ffff88007b410ad8 R14: ffff88000006c088 R15: ffff880079edbcc0
FS:  00007fea41061700(0000) GS:ffff88007ef00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00000000000000a0 CR3: 0000000073397000 CR4: 00000000000006e0
Stack:
 ffff88000006c000 ffff8800733c7dd8 ffffffffa08b139e ffff8800733c7df8
 ffffffffa04c1b8e 0000000000000000 ffff88000006c000 ffff8800733c7e68
 ffffffffa04c1fcf 0000000800000001 ffff88007abad768 0000000000000246
Call Trace:
 [<ffffffffa08b139e>] i915_driver_lastclose+0xe/0x20 [i915]
 [<ffffffffa04c1b8e>] drm_lastclose+0x2e/0x140 [drm]
 [<ffffffffa04c1fcf>] drm_release+0x32f/0x510 [drm]
 [<ffffffff811f18cf>] __fput+0x9f/0x1e0
 [<ffffffff811f1a4e>] ____fput+0xe/0x10
 [<ffffffff81095458>] task_work_run+0x78/0xa0
 [<ffffffff810036aa>] exit_to_usermode_loop+0xba/0xc0
 [<ffffffff81003bee>] syscall_return_slowpath+0x4e/0x60
 [<ffffffff815b5808>] int_ret_from_sys_call+0x25/0x8f
Code: e8 ae f4 dd ff 85 c0 74 0c f6 05 b3 6c c7 ff 01 75 35 5b 5d c3 48 8b 43
08 48 8d 78 60
RIP  [<ffffffffa08855a8>] intel_fbdev_restore_mode+0x48/0x80 [i915]
 RSP <ffff8800733c7dc0>
CR2: 00000000000000a0
---[ end trace c62f437557d31865 ]---

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20160528/fc908064/attachment.html>