drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state
authorBen Skeggs <bskeggs@redhat.com>
Wed, 5 Apr 2017 08:16:14 +0000 (18:16 +1000)
committerBen Skeggs <bskeggs@redhat.com>
Thu, 6 Apr 2017 04:19:21 +0000 (14:19 +1000)
commit2907e8670b6ef253bffb33bf47fd2182969cf2a0
tree830a0ed370b23ceaf0f8529ff434dd8da570552b
parentd639fbcc102745187f747a21bdcffcf628e174c8
drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state

When the atomic support was added to nouveau, the DRM core did not do this.

However, later in the same merge window, a commit (drm/fence: add in-fences
support) was merged that added it, leading to use-after-frees of the fence
object.

Cc: stable@vger.kernel.org [4.10+]
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
drivers/gpu/drm/nouveau/nv50_display.c