V4L/DVB: media/mem2mem: dereferencing free memory
We dereferenced "ctx" on the error path. Signed-off-by: Dan Carpenter <error27@gmail.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
This commit is contained in:
committed by
Mauro Carvalho Chehab
parent
a7b39036cf
commit
16ee9bb100
@@ -871,8 +871,10 @@ static int m2mtest_open(struct file *file)
|
|||||||
|
|
||||||
ctx->m2m_ctx = v4l2_m2m_ctx_init(ctx, dev->m2m_dev, queue_init);
|
ctx->m2m_ctx = v4l2_m2m_ctx_init(ctx, dev->m2m_dev, queue_init);
|
||||||
if (IS_ERR(ctx->m2m_ctx)) {
|
if (IS_ERR(ctx->m2m_ctx)) {
|
||||||
|
int ret = PTR_ERR(ctx->m2m_ctx);
|
||||||
|
|
||||||
kfree(ctx);
|
kfree(ctx);
|
||||||
return PTR_ERR(ctx->m2m_ctx);
|
return ret;
|
||||||
}
|
}
|
||||||
|
|
||||||
atomic_inc(&dev->num_inst);
|
atomic_inc(&dev->num_inst);
|
||||||
|
Reference in New Issue
Block a user