⬢ DragonFlyBSD Kernel Audit
DF-3913 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
--- a/sys/dev/drm/i915/intel_sdvo.c
+++ b/sys/dev/drm/i915/intel_sdvo.c
@@ -2539,6 +2539,9 @@
 	}
 
 	if (intel_sdvo_connector_init(intel_sdvo_connector, intel_sdvo) < 0) {
+		drm_atomic_helper_connector_destroy_state(
+			&intel_sdvo_connector->base.base,
+			intel_sdvo_connector->base.base.state);
 		kfree(intel_sdvo_connector);
 		return false;
 	}
@@ -2572,6 +2575,9 @@
 	intel_sdvo_connector->output_flag = type;
 
 	if (intel_sdvo_connector_init(intel_sdvo_connector, intel_sdvo) < 0) {
+		drm_atomic_helper_connector_destroy_state(
+			&intel_sdvo_connector->base.base,
+			intel_sdvo_connector->base.base.state);
 		kfree(intel_sdvo_connector);
 		return false;
 	}
@@ -2618,6 +2624,9 @@
 	}
 
 	if (intel_sdvo_connector_init(intel_sdvo_connector, intel_sdvo) < 0) {
+		drm_atomic_helper_connector_destroy_state(
+			&intel_sdvo_connector->base.base,
+			intel_sdvo_connector->base.base.state);
 		kfree(intel_sdvo_connector);
 		return false;
 	}
@@ -2654,6 +2663,9 @@
 	}
 
 	if (intel_sdvo_connector_init(intel_sdvo_connector, intel_sdvo) < 0) {
+		drm_atomic_helper_connector_destroy_state(
+			&intel_sdvo_connector->base.base,
+			intel_sdvo_connector->base.base.state);
 		kfree(intel_sdvo_connector);
 		return false;
 	}