diff options
| author | Nil Yi <teroincn@163.com> | 2021-08-14 12:29:39 +0200 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab+huawei@kernel.org> | 2021-09-30 10:07:43 +0200 |
| commit | c9458c6f8a8f9c8b09fef0e2a4d5798ded993ef8 (patch) | |
| tree | 6ade6435c15029b08c0f05ba9bb049c59dc68f67 /drivers/media/rc | |
| parent | media: dvb-usb: fix ununit-value in az6027_rc_query (diff) | |
| download | linux-c9458c6f8a8f9c8b09fef0e2a4d5798ded993ef8.tar.xz linux-c9458c6f8a8f9c8b09fef0e2a4d5798ded993ef8.zip | |
media: rc: clean the freed urb pointer to avoid double free
After freed rx_urb, we should set the second interface urb to NULL,
otherwise a double free would happen when the driver is removed
from the first interface.
Signed-off-by: Nil Yi <teroincn@163.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Diffstat (limited to 'drivers/media/rc')
| -rw-r--r-- | drivers/media/rc/imon.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/media/rc/imon.c b/drivers/media/rc/imon.c index 2ca4e86c7b9f..54da6f60079b 100644 --- a/drivers/media/rc/imon.c +++ b/drivers/media/rc/imon.c @@ -2358,8 +2358,10 @@ urb_submit_failed: touch_setup_failed: find_endpoint_failed: usb_put_dev(ictx->usbdev_intf1); + ictx->usbdev_intf1 = NULL; mutex_unlock(&ictx->lock); usb_free_urb(rx_urb); + ictx->rx_urb_intf1 = NULL; rx_urb_alloc_failed: dev_err(ictx->dev, "unable to initialize intf1, err %d\n", ret); |