commit 19d91eec5357e7cebde797a48de8609ae3a89484
author Mark Yao <mark.yao@rock-chips.com> Fri Jul 01 19:05:37 2016 +0000
committer android-build-merger <android-build-merger@google.com> Fri Jul 01 19:05:37 2016 +0000
tree 7540263fd9441ccfd4de8b7c4dc378f1e34197e1
parent cda66b80878c0c0f0799a145b41895c1149da88a
parent 63dd4c897693a614f9eedff817116f34590514ad

drm_gralloc: fix random crash with wildpointer am: 99e2a21625
am: 63dd4c8976

Change-Id: I4bd8c55bec3767b06b5965fa2795bb74f57929be

gralloc_drm.cpp

diff --git a/gralloc_drm.cpp b/gralloc_drm.cpp
index 6f90a84..b0328b0 100644
--- a/gralloc_drm.cpp
+++ b/gralloc_drm.cpp
@@ -194,7 +194,15 @@
  */
 int gralloc_drm_handle_register(buffer_handle_t handle, struct gralloc_drm_t *drm)
 {
-	return (validate_handle(handle, drm)) ? 0 : -EINVAL;
+	struct gralloc_drm_bo_t *bo;
+
+	bo = validate_handle(handle, drm);
+	if (!bo)
+		return -EINVAL;
+
+	bo->refcount++;
+
+	return 0;
 }
 
 /*
@@ -208,6 +216,7 @@
 	if (!bo)
 		return -EINVAL;
 
+	gralloc_drm_bo_decref(bo);
 	if (bo->imported)
 		gralloc_drm_bo_decref(bo);