diff options
| author | Luke Nowakowski-Krijger | 2019-06-21 21:04:38 -0400 |
|---|---|---|
| committer | Mauro Carvalho Chehab | 2019-06-27 07:35:24 -0400 |
| commit | c666355e60ddb4748ead3bdd983e3f7f2224aaf0 (patch) | |
| tree | 9aaf66c53d48a2945072534ff2a1faea4f75d40e /net/sched/cls_tcindex.c | |
| parent | b09a2ab2baeb36bf7ef7780405ad172281741c7c (diff) | |
media: radio-raremono: change devm_k*alloc to k*alloc
Change devm_k*alloc to k*alloc to manually allocate memory
The manual allocation and freeing of memory is necessary because when
the USB radio is disconnected, the memory associated with devm_k*alloc
is freed. Meaning if we still have unresolved references to the radio
device, then we get use-after-free errors.
This patch fixes this by manually allocating memory, and freeing it in
the v4l2.release callback that gets called when the last radio device
exits.
Reported-and-tested-by: syzbot+a4387f5b6b799f6becbf@syzkaller.appspotmail.com
Signed-off-by: Luke Nowakowski-Krijger <lnowakow@eng.ucsd.edu>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
[hverkuil-cisco@xs4all.nl: cleaned up two small checkpatch.pl warnings]
[hverkuil-cisco@xs4all.nl: prefix subject with driver name]
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Diffstat (limited to 'net/sched/cls_tcindex.c')
0 files changed, 0 insertions, 0 deletions