From: Chris Wilson Date: Thu, 10 Sep 2009 07:53:04 +0000 (+0100) Subject: drm/i915: Only destroy a constructed mmap offset X-Git-Tag: v2.6.32-rc1~52^2~42 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7e61615857c6fb3afbcb43f5c4e97511a923f5a8;p=pandora-kernel.git drm/i915: Only destroy a constructed mmap offset drm_ht_remove_item() does not handle removing an absent item and the hlist in particular is incorrectly initialised. The easy remedy is simply skip calling i915_gem_free_mmap_offset() unless we have actually created the offset and associated ht entry. This also fixes the mishandling of a partially constructed offset which leaves pointers initialized after freeing them along the i915_gem_create_mmap_offset() error paths. In particular this should fix the oops found here: https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-intel/+bug/415357/comments/8 Signed-off-by: Chris Wilson Signed-off-by: Eric Anholt Cc: stable@kernel.org --- Reading git-diff-tree failed