The port is removed synchronously, but the connector delayed. This causes a use after free which can cause a kernel BUG with slug_debug=FPZU. This is fixed by freeing the port after the connector. This fixes a regression introduced with 6b8eeca65b18ae77e175cc2b6571731f0ee413bf "drm/dp/mst: close deadlock in connector destruction."
Showing the changes to include (1 of 2 files). Show all
Unified · Split
| @@ -743,8 +743,6 @@ struct drm_connector { · 742 unmodified lines | ||
| 743 | 743 | uint8_t num_h_tile, num_v_tile; |
| 744 | 744 | uint8_t tile_h_loc, tile_v_loc; |
| 745 | 745 | uint16_t tile_h_size, tile_v_size; |
| 746 | − | |
| 747 | − struct list_head destroy_list; | |
| 748 | 746 | }; |
| 749 | 747 | |
| 750 | 748 | /** |