linux

iv/linux

History

Colin Ian King 3c0dde35e6 media: [next] media: vidtv: fix a read from an object after it has been freed

Currently the call to vidtv_psi_pat_table_destroy frees the object
m->si.pat however m->si.pat->num_pmt is being accessed after the
free.  Fix this by destroying m->si.pat after the m->si.pmt_secs[]
objects have been freed.

Addresses-Coverity: ("Read from pointer after free")

Reported-by: Cengiz Can <cengiz@kernel.wtf> # sent a similar fix about the same time

Fixes: 039b7caed173 ("media: vidtv: add a PID entry for the NIT table")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>

2020-12-02 13:15:07 +01:00

vicodec

Linux 5.9-rc4

2020-09-07 16:13:06 +02:00

vidtv

media: [next] media: vidtv: fix a read from an object after it has been freed

2020-12-02 13:15:07 +01:00

vimc

media: media/test-drivers: use vb2_video_unregister_device()

2020-08-28 15:05:40 +02:00

vivid

media: vivid: Add support to the CSC API