61e1cf76c2
drm_framebuffer_remove takes care of references to CRTC pointers before freeing up framebuffer object. Directly calling the destroy function may cause dangling CRTC pointers pointing inside the framebuffer object. Fixes #2140
14 lines
251 B
Diff
14 lines
251 B
Diff
--- a/drivers/gpu/drm/i915/intel_display.c
|
|
+++ b/drivers/gpu/drm/i915/intel_display.c
|
|
@@ -13567,6 +13568,10 @@
|
|
intel_crtc = to_intel_crtc(crtc);
|
|
|
|
plane->fb = fb;
|
|
+
|
|
+ if (!crtc)
|
|
+ return;
|
|
+
|
|
crtc->x = src->x1 >> 16;
|
|
crtc->y = src->y1 >> 16;
|
|
|