From af9afa287adb024fb0015583948d3a98a87e6798 Mon Sep 17 00:00:00 2001 From: Tautvis Date: Thu, 29 Jan 2026 01:49:04 +0200 Subject: [PATCH] modesetting: pageflip: clear new_front_bo struct in ms_do_pageflip ms_do_pageflip function temporary creates and destroy drmmode_bo object, but the structure is stack ( values goes uninitialized). This became problem because in f4362fc4ec146fab846a215471e3f7f6632e053d drmmode_bo struct got extra fields which is checked during drmmode_bo_destroy and causes crash. Signed-off-by: Tautvis --- hw/xfree86/drivers/video/modesetting/pageflip.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hw/xfree86/drivers/video/modesetting/pageflip.c b/hw/xfree86/drivers/video/modesetting/pageflip.c index 785c0d2d1..775206c2b 100644 --- a/hw/xfree86/drivers/video/modesetting/pageflip.c +++ b/hw/xfree86/drivers/video/modesetting/pageflip.c @@ -414,8 +414,8 @@ ms_do_pageflip(ScreenPtr screen, ms->glamor.block_handler(screen); + memset(&new_front_bo,0,sizeof(new_front_bo)); new_front_bo.gbm = ms->glamor.gbm_bo_from_pixmap(screen, new_front); - new_front_bo.dumb = NULL; if (!new_front_bo.gbm) { xf86DrvMsg(scrn->scrnIndex, X_ERROR,