The patch titled drivers/media/video/saa5246a.c: fix use-after-free has been removed from the -mm tree. Its filename was drivers-media-video-saa5246ac-fix-use-after-free.patch This patch was dropped because it was merged into mainline or a subsystem tree The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/ ------------------------------------------------------ Subject: drivers/media/video/saa5246a.c: fix use-after-free From: Dan Carpenter <error27@xxxxxxxxx> I lowered the kfree(t) down a couple lines and removed the superflous "t->vdev = NULL;" Signed-off-by: Dan Carpenter <error27@xxxxxxxxx> Cc: Hans Verkuil <hverkuil@xxxxxxxxx> Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- drivers/media/video/saa5246a.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff -puN drivers/media/video/saa5246a.c~drivers-media-video-saa5246ac-fix-use-after-free drivers/media/video/saa5246a.c --- a/drivers/media/video/saa5246a.c~drivers-media-video-saa5246ac-fix-use-after-free +++ a/drivers/media/video/saa5246a.c @@ -1092,9 +1092,8 @@ static int saa5246a_probe(struct i2c_cli /* Register it */ err = video_register_device(t->vdev, VFL_TYPE_VTX, -1); if (err < 0) { - kfree(t); video_device_release(t->vdev); - t->vdev = NULL; + kfree(t); return err; } return 0; _ Patches currently in -mm which might be from error27@xxxxxxxxx are linux-next.patch rxrpc-fix-error-handling-for-rxrpc_alloc_connection.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html