Skip to content

Commit 5a507b7

Browse files
Wayne Linalexdeucher
Wayne Lin
authored andcommitted
drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
[Why] Commit: - commit 5aa1dfc ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the commit - commit 54d2174 ("drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2") which cause regression. [How] Recover the original NULL fix and remove the unnecessary input parameter 'state' for drm_dp_add_payload_part2(). Fixes: 5aa1dfc ("drm/mst: Refactor the flow for payload allocation/removement") Reported-by: Leon Weiß <[email protected]> Link: https://lore.kernel.org/r/38c253ea42072cc825dc969ac4e6b9b600371cc8.camel@ruhr-uni-bochum.de/ Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Reviewed-by: Harry Wentland <[email protected]> Acked-by: Jani Nikula <[email protected]> Signed-off-by: Wayne Lin <[email protected]> Signed-off-by: Alex Deucher <[email protected]> Link: https://patchwork.freedesktop.org/patch/msgid/[email protected] (cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)
1 parent 20da948 commit 5a507b7

File tree

5 files changed

+4
-7
lines changed

5 files changed

+4
-7
lines changed

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -363,7 +363,7 @@ void dm_helpers_dp_mst_send_payload_allocation(
363363
mst_state = to_drm_dp_mst_topology_state(mst_mgr->base.state);
364364
new_payload = drm_atomic_get_mst_payload_state(mst_state, aconnector->mst_output_port);
365365

366-
ret = drm_dp_add_payload_part2(mst_mgr, mst_state->base.state, new_payload);
366+
ret = drm_dp_add_payload_part2(mst_mgr, new_payload);
367367

368368
if (ret) {
369369
amdgpu_dm_set_mst_status(&aconnector->mst_status,

drivers/gpu/drm/display/drm_dp_mst_topology.c

+1-3
Original file line numberDiff line numberDiff line change
@@ -3421,7 +3421,6 @@ EXPORT_SYMBOL(drm_dp_remove_payload_part2);
34213421
/**
34223422
* drm_dp_add_payload_part2() - Execute payload update part 2
34233423
* @mgr: Manager to use.
3424-
* @state: The global atomic state
34253424
* @payload: The payload to update
34263425
*
34273426
* If @payload was successfully assigned a starting time slot by drm_dp_add_payload_part1(), this
@@ -3430,14 +3429,13 @@ EXPORT_SYMBOL(drm_dp_remove_payload_part2);
34303429
* Returns: 0 on success, negative error code on failure.
34313430
*/
34323431
int drm_dp_add_payload_part2(struct drm_dp_mst_topology_mgr *mgr,
3433-
struct drm_atomic_state *state,
34343432
struct drm_dp_mst_atomic_payload *payload)
34353433
{
34363434
int ret = 0;
34373435

34383436
/* Skip failed payloads */
34393437
if (payload->payload_allocation_status != DRM_DP_MST_PAYLOAD_ALLOCATION_DFP) {
3440-
drm_dbg_kms(state->dev, "Part 1 of payload creation for %s failed, skipping part 2\n",
3438+
drm_dbg_kms(mgr->dev, "Part 1 of payload creation for %s failed, skipping part 2\n",
34413439
payload->port->connector->name);
34423440
return -EIO;
34433441
}

drivers/gpu/drm/i915/display/intel_dp_mst.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -1241,7 +1241,7 @@ static void intel_mst_enable_dp(struct intel_atomic_state *state,
12411241
if (first_mst_stream)
12421242
intel_ddi_wait_for_fec_status(encoder, pipe_config, true);
12431243

1244-
drm_dp_add_payload_part2(&intel_dp->mst_mgr, &state->base,
1244+
drm_dp_add_payload_part2(&intel_dp->mst_mgr,
12451245
drm_atomic_get_mst_payload_state(mst_state, connector->port));
12461246

12471247
if (DISPLAY_VER(dev_priv) >= 12)

drivers/gpu/drm/nouveau/dispnv50/disp.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -915,7 +915,7 @@ nv50_msto_cleanup(struct drm_atomic_state *state,
915915
msto->disabled = false;
916916
drm_dp_remove_payload_part2(mgr, new_mst_state, old_payload, new_payload);
917917
} else if (msto->enabled) {
918-
drm_dp_add_payload_part2(mgr, state, new_payload);
918+
drm_dp_add_payload_part2(mgr, new_payload);
919919
msto->enabled = false;
920920
}
921921
}

include/drm/display/drm_dp_mst_helper.h

-1
Original file line numberDiff line numberDiff line change
@@ -871,7 +871,6 @@ int drm_dp_add_payload_part1(struct drm_dp_mst_topology_mgr *mgr,
871871
struct drm_dp_mst_topology_state *mst_state,
872872
struct drm_dp_mst_atomic_payload *payload);
873873
int drm_dp_add_payload_part2(struct drm_dp_mst_topology_mgr *mgr,
874-
struct drm_atomic_state *state,
875874
struct drm_dp_mst_atomic_payload *payload);
876875
void drm_dp_remove_payload_part1(struct drm_dp_mst_topology_mgr *mgr,
877876
struct drm_dp_mst_topology_state *mst_state,

0 commit comments

Comments
 (0)