Patch "media: v4l: async: Fix duplicated list deletion" has been added to the 6.6-stable tree

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a note to let you know that I've just added the patch titled

    media: v4l: async: Fix duplicated list deletion

to the 6.6-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     media-v4l-async-fix-duplicated-list-deletion.patch
and it can be found in the queue-6.6 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.



commit 24a8eec74fa248d9c5b298525eb619af8dbad3a0
Author: Sebastian Reichel <sre@xxxxxxxxxx>
Date:   Mon Nov 13 23:57:23 2023 +0100

    media: v4l: async: Fix duplicated list deletion
    
    [ Upstream commit 3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2 ]
    
    The list deletion call dropped here is already called from the
    helper function in the line before. Having a second list_del()
    call results in either a warning (with CONFIG_DEBUG_LIST=y):
    
    list_del corruption, c46c8198->next is LIST_POISON1 (00000100)
    
    If CONFIG_DEBUG_LIST is disabled the operation results in a
    kernel error due to NULL pointer dereference.
    
    Fixes: 28a1295795d8 ("media: v4l: async: Allow multiple connections between entities")
    Signed-off-by: Sebastian Reichel <sre@xxxxxxxxxx>
    Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
    Signed-off-by: Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
    Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx>

diff --git a/drivers/media/v4l2-core/v4l2-async.c b/drivers/media/v4l2-core/v4l2-async.c
index 091e8cf4114b..8cfd593d293d 100644
--- a/drivers/media/v4l2-core/v4l2-async.c
+++ b/drivers/media/v4l2-core/v4l2-async.c
@@ -880,7 +880,6 @@ void v4l2_async_unregister_subdev(struct v4l2_subdev *sd)
 				  &asc->notifier->waiting_list);
 
 			v4l2_async_unbind_subdev_one(asc->notifier, asc);
-			list_del(&asc->asc_subdev_entry);
 		}
 	}
 




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux