From: Dan Carpenter <error27@gmail.com>
Date: Thu, 9 Dec 2010 05:35:40 +0000 (+0300)
Subject: drm: use after free in drm_queue_vblank_event()
X-Git-Tag: v2.6.37-rc6~27^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6f331623b99e1900e3a664bbe6e95406ff4b27f4;p=pandora-kernel.git

drm: use after free in drm_queue_vblank_event()

The "e" pointer is either NULL or freed when we call
drm_vblank_put(dev, e->pipe) on the error path.  Just pass the "pipe"
variable directly instead.

I changed another caller to use "pipe" as well for consistency.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
---

Reading git-diff-tree failed