Dan Carpenter a2dd235df4 media: dvbdev: drop refcount on error path in dvb_device_open() ...

If call to file->f_op->open() fails, then call dvb_device_put(dvbdev).

Fixes: 0fc044b2b5e2 ("media: dvbdev: adopts refcnt to avoid UAF")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>

2023-12-13 11:04:46 +01:00

..

dmxdev.c

media: dvb-core: Fix UAF due to refcount races at releasing

2022-11-04 16:56:43 +01:00

dvb_ca_en50221.c

media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221

2023-05-14 16:04:48 +01:00

dvb_demux.c

media: dvb_demux: fix a bug for the continuity counter

2023-05-13 08:20:01 +01:00

dvb_frontend.c

Revert "media: dvb-core: Fix use-after-free on race condition at dvb_frontend"

2023-06-14 23:16:29 +01:00

dvb_net.c

media: dvb-core: Fix use-after-free due on race condition at dvb_net

2023-05-14 06:30:45 +01:00

dvb_ringbuffer.c

media: dvb_ringbuffer : Fix a bug in dvb_ringbuffer.c

2022-11-25 10:05:25 +00:00

dvb_vb2.c

media: dvb-core: Do not initialize twice queue num_buffer field

2023-11-23 12:10:06 +01:00

dvbdev.c

media: dvbdev: drop refcount on error path in dvb_device_open()

2023-12-13 11:04:46 +01:00

Kconfig

media: Kconfig: cleanup VIDEO_DEV dependencies

2022-03-18 05:58:35 +01:00

Makefile

lib/math: Move dvb_math.c into lib/math/int_log.c

2023-07-09 22:47:48 +01:00