]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
drm/i915/overlay: Fix oops on unload
authorVille Syrjälä <ville.syrjala@linux.intel.com>
Tue, 3 Mar 2026 10:14:17 +0000 (12:14 +0200)
committerVille Syrjälä <ville.syrjala@linux.intel.com>
Tue, 3 Mar 2026 17:15:27 +0000 (19:15 +0200)
Apparently I failed to test the unload case properly and
thus didn't notice that the i915_overlay_is_active() needs
i915->overlay after fetch_and_zero() already cleared it.
Stop using fetch_and_zero() and only clear the pointer at
the end to avoid the oops.

Fixes: 38d9a352c45e ("drm/i915/overlay: Extract i915_overlay_is_active()")
Signed-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
Link: https://patch.msgid.link/20260303101417.14409-1-ville.syrjala@linux.intel.com
Reviewed-by: Michał Grzelak <michal.grzelak@intel.com>
drivers/gpu/drm/i915/i915_overlay.c

index 28518dbb5b8e0b1fc0c3a9f66931c84b89f85565..04d5ad6aba5ab33eee3e9f63e1e56ed4fc2ae1f4 100644 (file)
@@ -482,9 +482,8 @@ static void __iomem *i915_overlay_setup(struct drm_device *drm,
 static void i915_overlay_cleanup(struct drm_device *drm)
 {
        struct drm_i915_private *i915 = to_i915(drm);
-       struct i915_overlay *overlay;
+       struct i915_overlay *overlay = i915->overlay;
 
-       overlay = fetch_and_zero(&i915->overlay);
        if (!overlay)
                return;
 
@@ -499,6 +498,7 @@ static void i915_overlay_cleanup(struct drm_device *drm)
        i915_active_fini(&overlay->last_flip);
 
        kfree(overlay);
+       i915->overlay = NULL;
 }
 
 const struct intel_display_overlay_interface i915_display_overlay_interface = {