iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
112024a3b6
linux/drivers/media
History
Hans Verkuil 112024a3b6 media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release() 
Adding kfree(dvb) to vidtv_bridge_remove() will remove the memory
too soon: if an application still has an open filehandle to the device
when the driver is unloaded, then when that filehandle is closed, a
use-after-free access takes place to the freed memory.

Move the kfree(dvb) to vidtv_bridge_dev_release() instead.

Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Fixes: 76e21bb8be ("media: vidtv: Fix memory leak in remove")
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
2021-10-19 08:08:19 +01:00
..
cec media: CEC: keep related menu entries together 2021-10-05 09:39:32 +02:00
common media: videobuf2: handle non-contiguous DMA allocations 2021-09-30 10:07:57 +02:00
dvb-core media: videobuf2: add queue memory coherency parameter 2021-09-30 10:07:57 +02:00
dvb-frontends media: rtl2832_sdr: clean the freed pointer and counter 2021-10-08 13:54:16 +02:00
firewire media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() 2021-09-30 10:07:54 +02:00
i2c media: ov5670: Add implementation for events 2021-10-08 13:42:26 +02:00
mc media: Request API is no longer experimental 2021-09-30 10:07:55 +02:00
mmc
pci media: ipu3-cio2 Check num_planes and sizes in queue_setup 2021-10-08 13:27:07 +02:00
platform media: rcar-isp: Add Renesas R-Car Image Signal Processor driver 2021-10-08 13:26:43 +02:00
radio media: si470x: Avoid card name truncation 2021-09-30 10:08:00 +02:00
rc media: ir_toy: prevent device from hanging during transmit 2021-09-30 10:10:26 +02:00
spi media: cxd2880-spi: Fix a null pointer dereference on error handling path 2021-09-30 10:07:40 +02:00
test-drivers media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release() 2021-10-19 08:08:19 +01:00
tuners Linux 5.15-rc4 2021-10-04 07:52:13 +02:00
usb media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() 2021-10-08 13:54:43 +02:00
v4l2-core media: videobuf2: handle V4L2_MEMORY_FLAG_NON_COHERENT flag 2021-09-30 10:07:57 +02:00
Kconfig media: Correct 'so' 2021-03-22 11:52:09 +01:00
Makefile