summaryrefslogtreecommitdiffstats
path: root/drivers/media/usb/cx231xx/cx231xx-cards.c
diff options
context:
space:
mode:
authorDan Carpenter <dan.carpenter@oracle.com>2013-11-01 11:34:40 +0100
committerMauro Carvalho Chehab <m.chehab@samsung.com>2013-11-29 17:20:32 +0100
commit7e4b918750b494b68e24222dea5f7d85e90db022 (patch)
tree448e76b8abf095f948940715aea42588ce8c942f /drivers/media/usb/cx231xx/cx231xx-cards.c
parent[media] saa7164: fix return value check in saa7164_initdev() (diff)
downloadlinux-7e4b918750b494b68e24222dea5f7d85e90db022.tar.xz
linux-7e4b918750b494b68e24222dea5f7d85e90db022.zip
[media] cx231xx: use after free on error path in probe
We dereference "dev" after it has already been freed. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com> Cc: stable@vger.kernel.org Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
Diffstat (limited to 'drivers/media/usb/cx231xx/cx231xx-cards.c')
-rw-r--r--drivers/media/usb/cx231xx/cx231xx-cards.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/usb/cx231xx/cx231xx-cards.c b/drivers/media/usb/cx231xx/cx231xx-cards.c
index e9d017bea377..528cce958a82 100644
--- a/drivers/media/usb/cx231xx/cx231xx-cards.c
+++ b/drivers/media/usb/cx231xx/cx231xx-cards.c
@@ -1412,8 +1412,8 @@ err_v4l2:
usb_set_intfdata(interface, NULL);
err_if:
usb_put_dev(udev);
- kfree(dev);
clear_bit(dev->devno, &cx231xx_devused);
+ kfree(dev);
return retval;
}