diff options
| author | Ilia Mirkin <imirkin@alum.mit.edu> | 2013-08-09 17:25:54 -0400 |
|---|---|---|
| committer | Ben Skeggs <bskeggs@redhat.com> | 2013-08-21 11:34:10 +1000 |
| commit | e25d8b942bb167f11bc2ecb572132c554e4191da (patch) | |
| tree | d5835b78b1c9015f17b83d1cb7b3da22ac3496fb | |
| parent | 76bd14ff9acf47dc147cec13f4a4d5c090c65c70 (diff) | |
fb: fix null derefs in nv49 and nv4e init
Commit dceef5d87 (drm/nouveau/fb: initialise vram controller as pfb
sub-object) moved some code around and introduced these null derefs.
pfb->ram is set to the new ram object outside of this ctor.
Reported-by: Ronald Uitermark <ronald645@gmail.com>
Tested-by: Ronald Uitermark <ronald645@gmail.com>
Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
| -rw-r--r-- | nvkm/subdev/fb/ramnv49.c | 12 | ||||
| -rw-r--r-- | nvkm/subdev/fb/ramnv4e.c | 4 |
2 files changed, 8 insertions, 8 deletions
diff --git a/nvkm/subdev/fb/ramnv49.c b/nvkm/subdev/fb/ramnv49.c index 19e3a9a6..ab7ef0ac 100644 --- a/nvkm/subdev/fb/ramnv49.c +++ b/nvkm/subdev/fb/ramnv49.c @@ -40,15 +40,15 @@ nv49_ram_create(struct nouveau_object *parent, struct nouveau_object *engine, return ret; switch (pfb914 & 0x00000003) { - case 0x00000000: pfb->ram->type = NV_MEM_TYPE_DDR1; break; - case 0x00000001: pfb->ram->type = NV_MEM_TYPE_DDR2; break; - case 0x00000002: pfb->ram->type = NV_MEM_TYPE_GDDR3; break; + case 0x00000000: ram->type = NV_MEM_TYPE_DDR1; break; + case 0x00000001: ram->type = NV_MEM_TYPE_DDR2; break; + case 0x00000002: ram->type = NV_MEM_TYPE_GDDR3; break; case 0x00000003: break; } - pfb->ram->size = nv_rd32(pfb, 0x10020c) & 0xff000000; - pfb->ram->parts = (nv_rd32(pfb, 0x100200) & 0x00000003) + 1; - pfb->ram->tags = nv_rd32(pfb, 0x100320); + ram->size = nv_rd32(pfb, 0x10020c) & 0xff000000; + ram->parts = (nv_rd32(pfb, 0x100200) & 0x00000003) + 1; + ram->tags = nv_rd32(pfb, 0x100320); return 0; } diff --git a/nvkm/subdev/fb/ramnv4e.c b/nvkm/subdev/fb/ramnv4e.c index 7192aa6e..63a6aab8 100644 --- a/nvkm/subdev/fb/ramnv4e.c +++ b/nvkm/subdev/fb/ramnv4e.c @@ -38,8 +38,8 @@ nv4e_ram_create(struct nouveau_object *parent, struct nouveau_object *engine, if (ret) return ret; - pfb->ram->size = nv_rd32(pfb, 0x10020c) & 0xff000000; - pfb->ram->type = NV_MEM_TYPE_STOLEN; + ram->size = nv_rd32(pfb, 0x10020c) & 0xff000000; + ram->type = NV_MEM_TYPE_STOLEN; return 0; } |