linux-stable/drivers/gpu/drm
Xiaomeng Tong 7ef2fb384f gma500: fix an incorrect NULL check on list iterator
commit bdef417d84 upstream.

The bug is here:
	return crtc;

The list iterator value 'crtc' will *always* be set and non-NULL by
list_for_each_entry(), so it is incorrect to assume that the iterator
value will be NULL if the list is empty or no element is found.

To fix the bug, return 'crtc' when found, otherwise return NULL.

Cc: stable@vger.kernel.org
fixes: 89c78134cc ("gma500: Add Poulsbo support")
Signed-off-by: Xiaomeng Tong <xiam0nd.tong@gmail.com>
Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@gmail.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20220327052028.2013-1-xiam0nd.tong@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-06-14 16:53:54 +02:00
..
amd drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. 2022-06-14 16:53:53 +02:00
arc
arm drm/arm: fix unintentional integer overflow on left shift 2020-08-21 09:48:07 +02:00
armada
ast drm/ast: Fixed reboot test may cause system hanged 2019-09-06 10:20:45 +02:00
atmel-hlcdc drm: atmel-hlcdc: enable clock before configuring timing engine 2020-02-14 16:32:19 -05:00
bochs drm/bochs: downgrade pci_request_region failure from error to warning 2020-04-13 10:34:18 +02:00
bridge drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX 2022-06-14 16:53:53 +02:00
cirrus
etnaviv drm/etnaviv: replace MMU flush marker with flush sequence 2020-04-13 10:34:20 +02:00
exynos drm/exynos: fix ref count leak in mic_pre_enable 2020-07-22 09:22:21 +02:00
fsl-dcu
gma500 gma500: fix an incorrect NULL check on list iterator 2022-06-14 16:53:54 +02:00
hisilicon drm/hisilicon: hibmc: Don't overwrite fb helper surface depth 2020-01-27 14:46:04 +01:00
i2c
i810 drm/i810: Prevent underflow in ioctl 2019-12-17 20:38:51 +01:00
i915 drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() 2022-06-06 08:20:57 +02:00
imx drm/imx: Fix memory leak in imx_pd_connector_get_modes 2022-04-20 09:08:29 +02:00
lib
mediatek drm/mediatek: Fix mtk_cec_mask() 2022-06-14 16:53:47 +02:00
meson drm/meson: fix shutdown crash when component not probed 2021-06-03 08:36:19 +02:00
mga
mgag200
msm drm/msm: return an error pointer in msm_gem_prime_get_sg_table() 2022-06-14 16:53:49 +02:00
mxsfb drm/mxsfb: Don't select DRM_KMS_FB_HELPER 2021-07-20 16:17:41 +02:00
nouveau drm/nouveau/clk: Fix an incorrect NULL check on list iterator 2022-06-14 16:53:53 +02:00
omapdrm drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() 2020-12-29 13:46:54 +01:00
panel drm: panel: simple: Fix bpc for LG LB070WV8 panel 2020-08-21 09:48:09 +02:00
pl111
qxl drm: qxl: ensure surf.data is ininitialized 2021-07-20 16:17:36 +02:00
r128
radeon drm/radeon: Fix backlight control on iMac 12,1 2022-02-23 11:57:33 +01:00
rcar-du
rockchip drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() 2022-06-14 16:53:49 +02:00
savage
selftests
shmobile drm/shmob: Fix return value check in shmob_drm_probe 2020-01-27 14:46:12 +01:00
sis
sti drm/sti: do not remove the drm_bridge that was never added 2020-01-27 14:46:03 +01:00
stm drm/stm: attach gem fence to atomic state 2019-10-07 18:54:58 +02:00
sun4i drm/sun4i: mixer: Extend regmap max_register 2020-10-14 09:51:07 +02:00
tdfx
tegra drm/tegra: Fix reference leak in tegra_dsi_ganged_probe 2022-04-20 09:08:17 +02:00
tilcdc drm/tilcdc: fix leak & null ref in panel_connector_get_modes 2020-08-21 09:48:04 +02:00
tinydrm
ttm drm/ttm/nouveau: don't call tt destroy callback on alloc failure. 2022-01-27 09:01:01 +01:00
udl drm/udl: fix control-message timeout 2021-11-26 11:40:41 +01:00
vc4 drm/vc4: fix error code in vc4_create_object() 2021-12-08 08:46:49 +01:00
vgem drm/vgem: Close use-after-free race in vgem_gem_create 2022-05-12 12:17:08 +02:00
via
virtio drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes 2022-06-14 16:53:43 +02:00
vmwgfx drm/vmwgfx: Initialize drm_mode_fb_cmd2 2022-05-18 09:18:09 +02:00
zte drm/zte: Don't select DRM_KMS_FB_HELPER 2021-07-20 16:17:42 +02:00
ati_pcigart.c
drm_agpsupport.c
drm_atomic.c
drm_atomic_helper.c drm/atomic: put state on error path 2021-01-30 13:31:12 +01:00
drm_auth.c drm: Lock pointer access in drm_master_release() 2021-06-16 11:53:02 +02:00
drm_blend.c
drm_bridge.c
drm_bufs.c drm: return -EFAULT if copy_to_user() fails 2019-07-21 09:04:27 +02:00
drm_cache.c
drm_color_mgmt.c
drm_connector.c
drm_context.c
drm_crtc.c
drm_crtc_helper.c
drm_crtc_helper_internal.h
drm_crtc_internal.h
drm_debugfs.c drm/debugfs: fix plain echo to connector "force" attribute 2020-08-21 09:48:05 +02:00
drm_debugfs_crc.c drm: remove the newline for CRC source name. 2020-02-28 16:36:02 +01:00
drm_dma.c
drm_dp_aux_dev.c drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() 2020-12-29 13:47:09 +01:00
drm_dp_dual_mode_helper.c
drm_dp_helper.c
drm_dp_mst_topology.c drm/dp/mst: fix a possible memory leak in fetch_monitor_name() 2022-05-25 08:41:19 +02:00
drm_drv.c
drm_dumb_buffers.c
drm_edid.c drm/edid: Don't clear formats if using deep color 2022-04-20 09:08:16 +02:00
drm_edid_load.c drm/edid: Fix a missing-check bug in drm_load_edid_firmware() 2019-07-31 07:28:49 +02:00
drm_encoder.c
drm_encoder_slave.c drm: encoder_slave: fix refcouting error for modules 2020-06-25 15:41:59 +02:00
drm_fb_cma_helper.c
drm_fb_helper.c drm/fb-helper: Round up bits_per_pixel if possible 2020-01-14 20:05:44 +01:00
drm_file.c
drm_flip_work.c
drm_fourcc.c
drm_framebuffer.c drm: silence variable 'conn' set but not used 2019-08-16 10:13:52 +02:00
drm_gem.c drm: hold gem reference until object is no longer accessed 2020-08-05 10:06:49 +02:00
drm_gem_cma_helper.c
drm_gem_framebuffer_helper.c
drm_global.c
drm_hashtab.c
drm_info.c
drm_internal.h
drm_ioc32.c drm: Copy drm_wait_vblank to user before returning 2021-09-03 09:56:25 +02:00
drm_ioctl.c drm: Return -ENOTTY for non-drm ioctls 2021-07-28 11:12:20 +02:00
drm_irq.c
drm_kms_helper_common.c
drm_legacy.h
drm_lock.c
drm_memory.c
drm_mipi_dsi.c drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline 2020-08-21 09:48:07 +02:00
drm_mm.c
drm_mode_config.c
drm_mode_object.c
drm_modes.c
drm_modeset_helper.c
drm_modeset_lock.c
drm_of.c
drm_panel.c
drm_pci.c drm: Remove PageReserved manipulation from drm_pci_alloc 2020-04-24 08:00:50 +02:00
drm_plane.c
drm_plane_helper.c drm/plane-helper: fix uninitialized variable reference 2021-11-26 11:40:34 +01:00
drm_prime.c
drm_print.c
drm_probe_helper.c drm: Flush output polling on shutdown 2019-10-05 12:47:38 +02:00
drm_property.c drm: limit to INT_MAX in create_blob ioctl 2020-01-09 10:17:53 +01:00
drm_rect.c
drm_scatter.c
drm_scdc_helper.c
drm_simple_kms_helper.c
drm_syncobj.c drm/syncobj: Fix drm_syncobj_handle_to_fd refcount leak 2020-10-14 09:51:09 +02:00
drm_sysfs.c
drm_trace.h
drm_trace_points.c
drm_vblank.c
drm_vm.c
drm_vma_manager.c
Kconfig drm/radeon: fix AGP dependency 2021-03-30 14:40:09 +02:00
Makefile