The patch titled
drivers/media/video/saa5246a.c: fix use-after-free
has been removed from the -mm tree. Its filename was
drivers-media-video-saa5246ac-fix-use-after-free.patch
This patch was dropped because it was merged into mainline or a subsystem tree
The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/
------------------------------------------------------
Subject: drivers/media/video/saa5246a.c: fix use-after-free
From: Dan Carpenter <error27@xxxxxxxxx>
I lowered the kfree(t) down a couple lines and removed the superflous
"t->vdev = NULL;"
Signed-off-by: Dan Carpenter <error27@xxxxxxxxx>
Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
---
drivers/media/video/saa5246a.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff -puN drivers/media/video/saa5246a.c~drivers-media-video-saa5246ac-fix-use-after-free drivers/media/video/saa5246a.c
--- a/drivers/media/video/saa5246a.c~drivers-media-video-saa5246ac-fix-use-after-free
+++ a/drivers/media/video/saa5246a.c
@@ -1092,9 +1092,8 @@ static int saa5246a_probe(struct i2c_cli
/* Register it */
err = video_register_device(t->vdev, VFL_TYPE_VTX, -1);
if (err < 0) {
- kfree(t);
video_device_release(t->vdev);
- t->vdev = NULL;
+ kfree(t);
return err;
}
return 0;
_
Patches currently in -mm which might be from error27@xxxxxxxxx are
linux-next.patch
rxrpc-fix-error-handling-for-rxrpc_alloc_connection.patch
--
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
