]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
drm/nouveau: fix multiple instances of reference count leaks
authorAditya Pakki <pakki001@umn.edu>
Sun, 14 Jun 2020 01:41:56 +0000 (20:41 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Aug 2020 08:52:59 +0000 (10:52 +0200)
[ Upstream commit 659fb5f154c3434c90a34586f3b7aa1c39cf6062 ]

On calling pm_runtime_get_sync() the reference count of the device
is incremented. In case of failure, decrement the
ref count before returning the error.

Signed-off-by: Aditya Pakki <pakki001@umn.edu>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/gpu/drm/nouveau/nouveau_drm.c
drivers/gpu/drm/nouveau/nouveau_gem.c

index 91a61d2cca889bb315db0370ea79b019da777644..a90840e391100a098dc1117232621023ddee0879 100644 (file)
@@ -805,8 +805,10 @@ nouveau_drm_open(struct drm_device *dev, struct drm_file *fpriv)
 
        /* need to bring up power immediately if opening device */
        ret = pm_runtime_get_sync(dev->dev);
-       if (ret < 0 && ret != -EACCES)
+       if (ret < 0 && ret != -EACCES) {
+               pm_runtime_put_autosuspend(dev->dev);
                return ret;
+       }
 
        get_task_comm(tmpname, current);
        snprintf(name, sizeof(name), "%s[%d]", tmpname, pid_nr(fpriv->pid));
@@ -894,8 +896,10 @@ nouveau_drm_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
        long ret;
 
        ret = pm_runtime_get_sync(dev->dev);
-       if (ret < 0 && ret != -EACCES)
+       if (ret < 0 && ret != -EACCES) {
+               pm_runtime_put_autosuspend(dev->dev);
                return ret;
+       }
 
        switch (_IOC_NR(cmd) - DRM_COMMAND_BASE) {
        case DRM_NOUVEAU_NVIF:
index ae560f5977fca5e3f23b43251b79ad072c160b2e..e5db2a385cb65523504a8c280532379b372c5607 100644 (file)
@@ -42,8 +42,10 @@ nouveau_gem_object_del(struct drm_gem_object *gem)
        int ret;
 
        ret = pm_runtime_get_sync(dev);
-       if (WARN_ON(ret < 0 && ret != -EACCES))
+       if (WARN_ON(ret < 0 && ret != -EACCES)) {
+               pm_runtime_put_autosuspend(dev);
                return;
+       }
 
        if (gem->import_attach)
                drm_prime_gem_destroy(gem, nvbo->bo.sg);