ps3fb: prevent use after free of fb_info
authorJeremy Kerr <jk@ozlabs.org>
Fri, 11 Jan 2008 13:27:10 +0000 (14:27 +0100)
committerLinus Torvalds <torvalds@woody.linux-foundation.org>
Fri, 11 Jan 2008 19:47:42 +0000 (11:47 -0800)
commitba21611c9c0031ca8388cae5e43b38c29c8b595d
treec2062639f66ea8aebd1b874f291cfdcc6aee7e27
parentb506d1b6c49a5884ff67a29bc99a1912ee20acee
ps3fb: prevent use after free of fb_info

In ps3fb_shutdown, freeing the framebuffer will cause fb_info (in
dev->core.driver_data) to be free()ed, which we potentially access
from the ps3fbd kthread.

This change frees the framebuffer after stopping the ps3fbd kthread.

Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
Signed-off-by: Geert Uytterhoeven <Geert.Uytterhoeven@sonycom.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
drivers/video/ps3fb.c