OSDN Git Service

video: Fix use-after-free by vga16fb on rmmod
authorBruno Prémont <bonbons@linux-vserver.org>
Tue, 24 May 2011 19:59:17 +0000 (19:59 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 23 Jun 2011 22:05:35 +0000 (15:05 -0700)
commitdec314e6cc29b2c5d19aa84c1267a1dd750451cf
tree7c790cb3e2e887bc5a32ce95637f253bfa2df456
parent8f83b904ea7590794fc8ce490eaf57ac68955ee7
video: Fix use-after-free by vga16fb on rmmod

commit a50d28de8d5085e0f34f96088a45cc156d022021 upstream.

Since fb_info is now refcounted and thus may get freed at any time it
gets unregistered module unloading will try to unregister framebuffer
as stored in platform data on probe though this pointer may
be stale.

Cleanup platform data on framebuffer release.

Signed-off-by: Bruno Prémont <bonbons@linux-vserver.org>
Signed-off-by: Paul Mundt <lethal@linux-sh.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/video/vga16fb.c