This is a note to let you know that I've just added the patch titled [media] cx23885: uninitialized variable in cx23885_av_work_handler() to the 4.4-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: cx23885-uninitialized-variable-in-cx23885_av_work_handler.patch and it can be found in the queue-4.4 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 60587bd0680507f48ae3a7360983228fd207de8a Mon Sep 17 00:00:00 2001 From: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Date: Tue, 15 Mar 2016 04:05:20 -0300 Subject: [media] cx23885: uninitialized variable in cx23885_av_work_handler() From: Dan Carpenter <dan.carpenter@xxxxxxxxxx> commit 60587bd0680507f48ae3a7360983228fd207de8a upstream. The "handled" variable could be uninitialized if the interrupt_service_routine() call back hasn't been implimented or if it has been implemented but doesn't initialize "handled" to zero at the start. For example, adv76xx_isr() only sets "handled" to true. Fixes: 44b153ca639f ('[media] m5mols: Add ISO sensitivity controls') Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Signed-off-by: Hans Verkuil <hans.verkuil@xxxxxxxxx> Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/media/pci/cx23885/cx23885-av.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/media/pci/cx23885/cx23885-av.c +++ b/drivers/media/pci/cx23885/cx23885-av.c @@ -24,7 +24,7 @@ void cx23885_av_work_handler(struct work { struct cx23885_dev *dev = container_of(work, struct cx23885_dev, cx25840_work); - bool handled; + bool handled = false; v4l2_subdev_call(dev->sd_cx25840, core, interrupt_service_routine, PCI_MSK_AV_CORE, &handled); Patches currently in stable-queue which might be from dan.carpenter@xxxxxxxxxx are queue-4.4/net-moxa-fix-an-error-code.patch queue-4.4/cx23885-uninitialized-variable-in-cx23885_av_work_handler.patch queue-4.4/power-ipaq-micro-battery-freeing-the-wrong-variable.patch queue-4.4/i40e-fix-an-uninitialized-variable-bug.patch queue-4.4/mips-rm7000-double-locking-bug-in-rm7k_tc_disable.patch queue-4.4/btrfs-clean-up-an-error-code-in-btrfs_init_space_info.patch queue-4.4/xprtrdma-checking-for-null-instead-of-is_err.patch queue-4.4/asoc-intel-pass-correct-parameter-in-sst_alloc_stream_mrfld.patch queue-4.4/ath9k_htc-check-for-underflow-in-ath9k_htc_rx_msg.patch queue-4.4/qlcnic-use-the-correct-ring-in-qlcnic_83xx_process_rcv_ring_diag.patch queue-4.4/mips-octeon-off-by-one-in-octeon_irq_gpio_map.patch queue-4.4/qede-uninitialized-variable-in-qede_start_xmit.patch queue-4.4/mfd-lp8788-irq-uninitialized-variable-in-irq-handler.patch queue-4.4/nfc-nci-memory-leak-in-nci_core_conn_create.patch queue-4.4/ethernet-micrel-fix-some-error-codes.patch queue-4.4/am437x-vpfe-fix-an-uninitialized-variable-bug.patch queue-4.4/qlcnic-potential-null-dereference-in-qlcnic_83xx_get_minidump_template.patch queue-4.4/bpf-mips-fix-off-by-one-in-ctx-offset-allocation.patch queue-4.4/mdio-sun4i-oops-in-error-handling-in-probe.patch queue-4.4/vfio-platform-reset-fix-a-warning-message-condition.patch queue-4.4/x86-apic-uv-silence-a-shift-wrapping-warning.patch