@@ -2389,8 +2389,8 @@ struct sde_rm_rsvp *_sde_rm_poll_get_rsvp_nxt_locked(struct sde_rm *rm,
usleep_range(sleep, sleep * 2);
mutex_lock(&rm->rm_lock);
}
-
- return rsvp_nxt;
+ /* make sure to get latest rsvp_next to avoid use after free issues */
+ return _sde_rm_get_rsvp_nxt(rm, enc);
int sde_rm_reserve(
qctecmdr