diff options
| author | Evgeny Novikov <novikov@ispras.ru> | 2020-07-23 19:04:53 +0200 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab+huawei@kernel.org> | 2020-08-06 11:32:02 +0200 |
| commit | 602649eadaa0c977e362e641f51ec306bc1d365d (patch) | |
| tree | 1795cbae50553aa9722aaf720d0b152204332941 /drivers/media | |
| parent | 670f7ef5f0fccd5b6dd7da80a0f7ec6b6cf9aafa (diff) | |
| download | lwn-602649eadaa0c977e362e641f51ec306bc1d365d.tar.gz lwn-602649eadaa0c977e362e641f51ec306bc1d365d.zip | |
media: davinci: vpif_capture: fix potential double free
In case of errors vpif_probe_complete() releases memory for vpif_obj.sd
and unregisters the V4L2 device. But then this is done again by
vpif_probe() itself. The patch removes the cleaning from
vpif_probe_complete().
Found by Linux Driver Verification project (linuxtesting.org).
Signed-off-by: Evgeny Novikov <novikov@ispras.ru>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Diffstat (limited to 'drivers/media')
| -rw-r--r-- | drivers/media/platform/davinci/vpif_capture.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/drivers/media/platform/davinci/vpif_capture.c b/drivers/media/platform/davinci/vpif_capture.c index d9ec439faefa..72a0e94e2e21 100644 --- a/drivers/media/platform/davinci/vpif_capture.c +++ b/drivers/media/platform/davinci/vpif_capture.c @@ -1482,8 +1482,6 @@ probe_out: /* Unregister video device */ video_unregister_device(&ch->video_dev); } - kfree(vpif_obj.sd); - v4l2_device_unregister(&vpif_obj.v4l2_dev); return err; } |