Hi Hans, On Mon, Oct 31, 2011 at 04:16:46PM +0100, Hans de Goede wrote: > The kev pointers inside the pending events queue (the available queue) of the > fh point to data inside the sev, unsubscribing frees the sev, thus making these > pointers point to freed memory! > > This patch fixes these dangling pointers in the available queue by removing > all matching pending events on unsubscription. > > Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx> > --- > drivers/media/video/v4l2-event.c | 8 ++++++++ > 1 files changed, 8 insertions(+), 0 deletions(-) Thanks for the patch! I think this should go in rather soon as this is an important bugfix. Acked-by: Sakari Ailus <sakari.ailus@xxxxxx> -- Sakari Ailus e-mail: sakari.ailus@xxxxxx jabber/XMPP/Gmail: sailus@xxxxxxxxxxxxxx -- To unsubscribe from this list: send the line "unsubscribe linux-media" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html