kpriv/linux-hardened
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

V4L/DVB (8842): vivi_release(): fix use-after-free

Browse source 
video_device_release() does kfree(), which made the following printk()
doing a use-after-free.

printk() first and release then.

Reported-by: Adrian Bunk <bunk@kernel.org>
Signed-off-by: Adrian Bunk <bunk@kernel.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
This commit is contained in:
Adrian Bunk 2008-09-03 17:12:25 -03:00 committed by Mauro Carvalho Chehab
parent 9a0c04a1ee
commit 8da9bae329
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
drivers/media/video/vivi.c
View file

@ -1021,13 +1021,13 @@ static int vivi_release(void)
dev = list_entry(list, struct vivi_dev, vivi_devlist); dev = list_entry(list, struct vivi_dev, vivi_devlist);
if (-1 != dev->vfd->minor) { if (-1 != dev->vfd->minor) {
printk(KERN_INFO "%s: unregistering /dev/video%d\n",
VIVI_MODULE_NAME, dev->vfd->minor);
video_unregister_device(dev->vfd); video_unregister_device(dev->vfd);
printk(KERN_INFO "%s: /dev/video%d unregistered.\n",
VIVI_MODULE_NAME, dev->vfd->minor);
} else { } else {
video_device_release(dev->vfd); printk(KERN_INFO "%s: releasing /dev/video%d\n",
printk(KERN_INFO "%s: /dev/video%d released.\n",
VIVI_MODULE_NAME, dev->vfd->minor); VIVI_MODULE_NAME, dev->vfd->minor);
video_device_release(dev->vfd);
} }
kfree(dev); kfree(dev);