| commit | a50d28de8d5085e0f34f96088a45cc156d022021 | [log] [tgz] |
|---|---|---|
| author | Bruno Prémont <bonbons@linux-vserver.org> | Tue May 24 19:59:17 2011 +0000 |
| committer | Paul Mundt <lethal@linux-sh.org> | Mon Jun 06 18:14:45 2011 +0900 |
| tree | 7469b8d254760a64ecf0450ca86d2c626e37a1df | |
| parent | 1b86d775dd4c13967e1895df09d0cef198956e81 [diff] |
video: Fix use-after-free by vga16fb on rmmod Since fb_info is now refcounted and thus may get freed at any time it gets unregistered module unloading will try to unregister framebuffer as stored in platform data on probe though this pointer may be stale. Cleanup platform data on framebuffer release. CC: stable@kernel.org Signed-off-by: Bruno Prémont <bonbons@linux-vserver.org> Signed-off-by: Paul Mundt <lethal@linux-sh.org>