summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJose Maria Casanova Crespo <jmcasanova@igalia.com>2020-05-15 18:33:11 +0200
committerLyude Paul <lyude@redhat.com>2020-07-21 15:22:48 +0000
commit4912f693e8e3abbd090ee02b4bfe14703c3bad0f (patch)
tree69b4e91e049511bbbf8c1f5e1adb76449833015c
parentccbcf083d5c676311aab77cc837a2539a7278a62 (diff)
modesetting: Fix front_bo leak at drmmode_xf86crtc_resize on XRandR rotation
Since the introduction of "modesetting: Remove unnecessary fb addition from drmmode_xf86crtc_resize" the fb_id isn't initialited at drmmode_xf86crtc_resize. Rotate operation of XRandR uses rotate_bo. So in this case the fb_id associated to the front_bo is not initialized at drmmode_set_mode_major. So fd_id remains 0. As every call to drmmode_xf86crtc_resize allocates a new front_bo we should destroy unconditionally the old_front_bo if operation success. So we free the allocated GBM handles. This avoids crashing xserver with a OOM in the RPI4 1Gb at 4k resolution after 3 series xrandr rotations from normal to left and vice versa reported at https://github.com/raspberrypi/firmware/issues/1345 Signed-off-by: Jose Maria Casanova Crespo <jmcasanova@igalia.com> Reviewed-by: Keith Packard <keithp@keithp.com> Closes: https://gitlab.freedesktop.org/xorg/xserver/-/issues/1024 Fixes: 8774532121 "modesetting: Remove unnecessary fb addition from drmmode_xf86crtc_resize" (cherry picked from commit 73480f172aeced074dd9301ae4d97f7d2f3a9a45)
-rw-r--r--hw/xfree86/drivers/modesetting/drmmode_display.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/hw/xfree86/drivers/modesetting/drmmode_display.c b/hw/xfree86/drivers/modesetting/drmmode_display.c
index 7ea6bddee..59abb6cc7 100644
--- a/hw/xfree86/drivers/modesetting/drmmode_display.c
+++ b/hw/xfree86/drivers/modesetting/drmmode_display.c
@@ -3206,10 +3206,10 @@ drmmode_xf86crtc_resize(ScrnInfoPtr scrn, int width, int height)
crtc->rotation, crtc->x, crtc->y);
}
- if (old_fb_id) {
+ if (old_fb_id)
drmModeRmFB(drmmode->fd, old_fb_id);
- drmmode_bo_destroy(drmmode, &old_front);
- }
+
+ drmmode_bo_destroy(drmmode, &old_front);
return TRUE;